django-guardian/django-guardian
Django Guardian
django-guardian is a Django object permission library that enables the assignment of fine-grained access rights to individual database records. This system provides object-level access control, allowing users or groups to be granted permissions for specific model instances rather than applying a single global rule to an entire data model.
The library includes a permission manager for the Django administrative interface, which provides a visual dashboard to assign and audit these instance-specific security rules. It also features an anonymous access controller to define and verify permissions for unauthenticated visitors.
The framework implements role-based access control and supports granular user permissions across various content instances.
Features
- Scoped Permission Assignments - Grants specific users or groups access to individual database records instead of applying global model permissions.
- Database-Backed RBAC - Persists granular object permission mappings in relational database tables for dynamic access control.
- Many-to-Many Associations - Utilizes junction tables to associate multiple users and groups with specific object permissions for efficient lookup.
- Generic Foreign Key Mappings - Uses generic relationships to link a single permission table to any model instance regardless of type.
- Granular Permission Systems - Implements a system for assigning specific access rights to individual users or groups for single content items.
- Fine-Grained Permission Checking - Provides a high-performance system for evaluating whether a user is authorized to access a specific database record.
- Role-Based Access Control - Implements a security framework for managing user and group permissions through roles associated with content instances.
- Object-Level Authorizations - Manages permissions for individual database records rather than applying identical rules to every instance of a model.
- Permission Caching - Provides an in-memory cache for evaluated object permissions to minimize database queries during access checks.
- Anonymous Access Controllers - Provides a mechanism for granting and verifying specific object permissions for unauthenticated users.
- Anonymous User Permissions - Implements a virtual user system to apply fine-grained object permissions to unauthenticated guests.
- Public Access Policies - Defines policies that allow unauthenticated anonymous visitors to access specific objects.
- Permission Management Dashboards - Provides a visual dashboard in the admin interface to manage per-object permission settings.
- Permission-Based Access Control - Allows administrators to control instance-specific access rights through a visual interface.
- Anonymous Permission Management - Assigns and verifies access rights for unauthenticated visitors to specific objects.
- Model-Agnostic Permissions - Decouples authorization logic from model definitions by storing permissions in external tables.
- Django User Administration - Integrates with the Django administrative interface to visually assign and audit object-level access rights.
- Admin Permission Managers - Integrates a manager into the administrative dashboard to visually assign object-level security rules.
- Access Control - Object-level permission management for Django.
- Authentication - Listed in the “Authentication” section of the Awesome Python awesome list.
- Authentication and Permissions - Implementation of per-object permissions for Django.
- Authorization - Per-object permission backend for Django.
- Permissions - Per-object permission support for models.
