title: DjangoRestFramework - object level permission not being allowed for some reason (has_permission and has_object_permission)
body: <p>This is my permission:</p>
  
  <pre><code>class IsFllowOrAdminUserOrReadOnly(permissions.BasePermission):
      """
      Allow any users to follow objects and ReadOnly. Allow all requests for
      admin users.
      """
      def has_permission(self, request, view):
          return request.method in permissions.SAFE_METHODS or request.user.is_staff
  
      def has_object_permission(self, request, view, obj):
          # Allow watching objects.
          if view.action=='follow':
              return True
  
          return request.method in permissions.SAFE_METHODS or request.user.is_staff
  </code></pre>
  
  <p>And this is my viewset (and follow action):</p>
  
  <pre><code>class PageViewSet(viewsets.ModelViewSet):
      queryset = Page.objects.all()
      serializer_class = PageSerializer
      permission_classes = (IsAuthenticated, IsCreationOrFollowOrOwnerOrReadOnly,)
  
      def perform_create(self, serializer):
          serializer.save(owner=self.request.user, location=self.request.user.userextended.location)
  
      @detail_route(methods=['post'])
      def follow(self, request, pk=None):
          page = self.get_object()    
  
          page.users.add(request.user)
  
          return Response(status=status.HTTP_204_NO_CONTENT)
  </code></pre>
  
  <p>The problem is, when an authenticated user tries to follow an object, it gives me a <code>403_FORBIDDEN</code> error even though I have the code:</p>
  
  <pre><code>if view.action=='follow':
      return True
  </code></pre>
  
  <p>Any idea how I should fix this?</p>
  
  <p>Note that this issue is different than this one I posted earlier: <a href="https://stackoverflow.com/questions/33468455/djangorestframework-how-to-properly-seperate-has-permission-and-has-object-per">DjangoRestFramework - How to properly seperate has_permission and has_object_permission</a> because this permission only allows admin users to create objects whereas the other post allows any users to create objects.</p>