update: Rewrite permissions

@sylvain Done, here's how it works:

• On djangoldp Model.Meta.
• permission_classes is not mandatory anymore if not provided it'll be LDPPermissions.
• By default, no one have any right.
• Model.Meta now have anonymous_perms, authenticated_perms, owner_perms
• anonymous_perms, authenticated_perms and owner_perms can have view, add, change, control, or delete
• They can also have inherit - that is activated by default. Owner inherit from Auth who inherit from Anons.

egs. :

class EveryoneCanRead(Model):
    class Meta:
        anonymous_perms = ['view']
# Because default owner & auth are inherit.

class NoOneCanUseMe(Model):
    class Meta:

class AuthOnly(Model):
    class Meta:
        anonymous_perms = []
        authenticated_perms = ['view', 'add']
        owner_perms = ['inherit', 'change', 'control', 'delete']

class Notifications(Model):
    class Meta:
        anonymous_perms = ['add']
        authenticated_perms = []
        owner_perms = ['view', 'change']

class OhNoOwnerCantRead(Model):
    class Meta:
        anonymous_perms = ['view']
        authenticated_perms = ['inherit', 'add']
        owner_perms = ['change', 'control', 'delete']
# I supposed this is bad, but we don't want to always inherit permissions..?

Also, you can still overload it if you need more precise permissions (Member of a project for example)

@bleme If you can take a look too.

djangoldp/tests/tests_anonymous_permissions.py

-from django.contrib.auth.models import AnonymousUser
-from django.test import TestCase
-from rest_framework.test import APIRequestFactory
+import json
 
+from django.test import TestCase
 from guardian.shortcuts import get_anonymous_user
+from rest_framework.test import APIRequestFactory
 
+from djangoldp.permissions import LDPPermissions
 from djangoldp.tests.models import JobOffer
 from djangoldp.views import LDPViewSet
 
-import json
-
 
 class TestAnonymousUserPermissions(TestCase):
     def setUp(self):
@@ -22,6 +21,8 @@ class TestAnonymousUserPermissions(TestCase):
         my_view = LDPViewSet.as_view({'get': 'list'},
                                      model=JobOffer,
                                      nested_fields=["skills"])
+        my_view.cls.permission_classes = [LDPPermissions]
+
         response = my_view(request)
         self.assertEqual(response.status_code, 200)
 
@@ -29,6 +30,8 @@ class TestAnonymousUserPermissions(TestCase):
         data = {'title': 'new idea'}
         request = self.factory.post('/job-offers/', json.dumps(data), content_type='application/ld+json')
         my_view = LDPViewSet.as_view({'post': 'create'}, model=JobOffer, nested_fields=["skills"])
+        my_view.cls.permission_classes = [LDPPermissions]
+
         response = my_view(request, pk=1)
         self.assertEqual(response.status_code, 403)
 
@@ -37,6 +40,8 @@ class TestAnonymousUserPermissions(TestCase):
         my_view = LDPViewSet.as_view({'put': 'update'},
                                      model=JobOffer,
                                      nested_fields=["skills"])
+        my_view.cls.permission_classes = [LDPPermissions]
+
         response = my_view(request, pk=self.job.pk)
         self.assertEqual(response.status_code, 403)
 
@@ -45,5 +50,6 @@ class TestAnonymousUserPermissions(TestCase):
         my_view = LDPViewSet.as_view({'patch': 'partial_update'},
                                      model=JobOffer,
                                      nested_fields=["skills"])
+        my_view.cls.permission_classes = [LDPPermissions]
         response = my_view(request, pk=self.job.pk)
         self.assertEqual(response.status_code, 403)