Declarative data access rules for Django | Hacker News Reader