Check this https://pypi.org/project/django-url-group-permissions/
A Django package for managing URL-based permissions through user groups with HTTP method support