১. Field level permission (ফিল্ড-লেভেল পারমিশন)

   pip install django django-unfold django-guardian

   django-admin startproject myproject
   cd myproject
   python manage.py startapp myapp

# settings.py
INSTALLED_APPS = [
    'unfold',
    'django.contrib.admin',
    'django.contrib.auth',
    'django.contrib.contenttypes',
    'django.contrib.sessions',
    'django.contrib.messages',
    'django.contrib.staticfiles',
    'guardian',
    'myapp',  # আপনার অ্যাপের নাম
]

AUTHENTICATION_BACKENDS = (
    'django.contrib.auth.backends.ModelBackend',
    'guardian.backends.ObjectPermissionBackend',
)

from django.db import models
from django.contrib.auth.models import User

class Document(models.Model):
    title = models.CharField(max_length=200, verbose_name="ডকুমেন্টের নাম")
    content = models.TextField(verbose_name="কন্টেন্ট")
    confidential = models.TextField(verbose_name="গোপন নোট")  # রেস্ট্রিক্টেড ফিল্ড
    owner = models.ForeignKey(User, on_delete=models.CASCADE)

    class Meta:
        permissions = [
            ("view_confidential", "গোপন নোট দেখার অনুমতি"),
            ("change_confidential", "গোপন নোট এডিটের অনুমতি"),
        ]

from unfold.admin import ModelAdmin
from django.contrib import admin
from guardian.admin import GuardedModelAdmin
from .models import Document

@admin.register(Document)
class DocumentAdmin(GuardedModelAdmin, ModelAdmin):
    list_display = ['title', 'owner']

    # ফিল্ড দেখার অনুমতি চেক
    def get_fields(self, request, obj=None):
        fields = super().get_fields(request, obj)
        if not request.user.has_perm('myapp.view_confidential', obj):
            fields = [f for f in fields if f != 'confidential']
        return fields

    # ফিল্ড এডিটের অনুমতি চেক
    def get_readonly_fields(self, request, obj=None):
        readonly = super().get_readonly_fields(request, obj)
        if not request.user.has_perm('myapp.change_confidential', obj):
            readonly += ('confidential',)
        return readonly

    # শুধু ইউজারের নিজের ডকুমেন্ট দেখাবে
    def get_queryset(self, request):
        qs = super().get_queryset(request)
        if request.user.is_superuser:
            return qs
        return qs.filter(owner=request.user)

python manage.py makemigrations
python manage.py migrate
python manage.py createsuperuser

   python manage.py shell

   from django.contrib.auth.models import User
   from myapp.models import Document
   from guardian.shortcuts import assign_perm

   user = User.objects.get(username='user1')
   doc = Document.objects.get(id=1)

   # পারমিশন দিন
   assign_perm('myapp.view_confidential', user, doc)
   assign_perm('myapp.change_confidential', user, doc)

   # views.py
   if not request.user.has_perm('myapp.change_confidential', obj):
       raise PermissionDenied("এই ফিল্ড এডিটের অনুমতি নেই!")

   {% if user.has_perm 'myapp.view_confidential' %}
       {{ object.confidential }}
   {% endif %}