Authorization in Django: From Permissions to Policies: Part 4 — Convention as Architecture
By this point in the series, several foundations are already in place.
Permissions are not logic. They are data.
ContentTypes exist to provide stable, database-level model identity.
Authorization in Django depends on identifiers, not Python object...