The Django admin's ModelAdmin class, which you must subclass to
provide an admin interface for your models, has methods (consult
source) which determine whether a given user has permission to edit a
given object. By default these are simply the class-level permissions,
but you are free to override them and will have access to the
individual object to perform whatever checks you like.
Personally, I think this obsoletes any attempt at generic "row-level
permissions" implementations.
--
"Bureaucrat Conrad, you are technically correct -- the best kind of correct."