Isolated subsets of users?

Question

Django

Good day, habr!
I participate in the development of a portal whose clients are entire companies, with my own users, admins, groups, permissions. All clients work with the same models, but must be completely isolated from each other.
What approach would you recommend, habr? Or maybe something already exists? Any best practices? Of particular interest is the flexible model of permissions, which takes into account the isolation of objects of one company from the objects of another company.

Answer 1

docs.djangoproject.com/en/1.4/ref/contrib/sites/

Answer 2

We have developed for ourselves an analogue of the nix permission model.
The model has flags "read", "add", "edit", "delete". There is also an owner and an owner group. Flexibility is definitely there :)