Tag feed

#authorization-architecture

2 posts0 followers

Authorization in Django: From Permissions to Policies — Part 13 (Capstone) — Authorization Is Not Security

Jan 12 · 6 min read · By this point in the series, authorization should no longer feel like a feature.It should feel like a boundary. — Permissions define who may attempt an action.— Policies define what is valid now.— Invariants define what must never be false. Together,...

Join discussion

APAbhilash PSabhilashps.me

0

Authorization in Django: From Permissions to Policies : Part 3 — ContentTypes and the Model Registry

Jan 2 · 7 min read · Once we stop treating permissions as rules and start treating them as data, a natural question follows: Data about what? A permission is a label that says, *“*this action applies to that thing.” But how does Django identify that thing—especially in a...

Join discussion

#authorization-architecture

Search Hashnode

#authorization-architecture

Authorization in Django: From Permissions to Policies — Part 13 (Capstone) — Authorization Is Not Security

Authorization in Django: From Permissions to Policies : Part 3 — ContentTypes and the Model Registry