Authorization in Django: From Permissions to Policies — Part 9 — Policies: Making Context Explicit

By now, the limits of permissions are no longer abstract. Permissions work precisely because they are small, static, and boring. They express capability in principle—nothing more. They do not know when an action happens, why it happens, or whether it...