Add django-guardian for object-level permissions

Signed-off-by: Alek Ratzloff <alekratz@gmail.com>

threadchat/settings.py

@@ -42,6 +42,7 @@ INSTALLED_APPS = [
     "django.contrib.sessions",
     "django.contrib.messages",
     "django.contrib.staticfiles",
+    "guardian",
     "board",
 ]
 
@@ -75,6 +76,11 @@ TEMPLATES = [
 
 WSGI_APPLICATION = "threadchat.wsgi.application"
 
+AUTHENTICATION_BACKENDS = (
+    "django.contrib.auth.backends.ModelBackend",
+    "guardian.backends.ObjectPermissionBackend",
+)
+
 
 # Database
 # https://docs.djangoproject.com/en/4.0/ref/settings/#databases