Django: Are row level permissions available for specific rules, or do they relate to views?

Sorry for the confusing name. I tried to make it less detailed, but ...

I am wondering: does Django add new row-level permissions (a) to fix the design problem that comes with applications with multiple tenants (I do not mean several users, but several instances working with the same db / db scheme), or it is (b) just a more complex version of permissions that allows you to manage row-level permissions based on the standard User and Auth applications.

(i.e. I want to restrict access to objects a, b, c of this account and d, e, f for this VS account, the user can access the title of the blog post, but not the content)

+4
source share
1 answer

django-authority allows row-level permissions to be implemented along with django table-level permissions, using the same syntax for both. Thus, this allows you to restrict users A, B to work only with object C, but not D.

The restriction of access to the field level (title, content) is even more detailed and cannot be processed here.

+5
source

Source: https://habr.com/ru/post/1299392/


All Articles