0:27:53
Leveraging the ORM to enforce object level permissions
DjangoCon US 2021 · October 23, 2021
Jeremy Stretch explains how Django’s built-in permissions are model-wide and how object-level checks passed to `user.has_perm()` are unsupported by the default backend. Drawing on NetBox’s needs, he describes a permission model that stores Django ORM-style filters as JSON, associates them with users or groups and…