best way of using django Permissions (permission_required)

There is no need to create a model just to serve as an anchor for a permission.

I’d create that permission with the content_type being a reference to User.

See the full discussion at Conditional content rendering, based on permissions for a more in-depth explanation.