I am making a photo sharing application using Django Framework. I am stuck with 2 problems
1) The user who has uploaded photo can only edit that photo. Other users cannot edit that photo. But can see/view list of photos by all users. and also they can add any photo under their username
2) I need to define a row level permissions for one of the functionality. Eg - Rating of photo by other users. Now, that u can only do when u give write permissions to that user. So if i give write permissions, user would be able to edit other stuff also (name, album etc..) which i do not want. I only want that user can only edit ratings.
I tried searching for the answer but i am not able to get any.
Would be glad if someone can help