doccano/backend/labels/permissions.py

from rest_framework.permissions import BasePermission


class CanEditLabel(BasePermission):

    def __init__(self, queryset):
        super().__init__()
        self.queryset = queryset

    def has_permission(self, request, view):
        if request.user.is_superuser:
            return True

        annotation_id = view.kwargs.get('annotation_id')
        return self.queryset.filter(id=annotation_id, user=request.user).exists()