def has_permission(self, request): return ( super().has_permission(request) and request.session[BACKEND_SESSION_KEY] == 'people.backend.PersonBackend' )