DRF -如何在查询集上实现基于对象的权限？

from rest_framework.permissions import BasePermission

class MyObjectPermission(BasePermission):
    def has_object_permission(self, request, view, obj):
        # 在这里实现基于对象的权限逻辑
        # 根据业务需求进行判断和权限验证
        # 返回True表示有权限，返回False表示无权限
        pass

from rest_framework.viewsets import ModelViewSet
from myapp.models import MyModel
from myapp.permissions import MyObjectPermission

class MyModelViewSet(ModelViewSet):
    queryset = MyModel.objects.all()
    serializer_class = MyModelSerializer
    permission_classes = [MyObjectPermission]

from rest_framework.permissions import BasePermission

class MyObjectPermission(BasePermission):
    def has_object_permission(self, request, view, obj):
        # 示例：只允许对象的创建者编辑和删除对象
        if request.method in ['PUT', 'PATCH', 'DELETE']:
            return obj.created_by == request.user
        return True