Authorization in Django: From Permissions to Policies : Part 7 — Failure as a Boundary

Up to this point, Django’s authorization system has been deliberately conservative. — Permissions are static.— They are model-scoped.— They express capability, not context. If permissions were meant to answer every authorization question, they would ...