0:35:19
The Pit of Success for Per Object Permissions in Django
DjangoCon US 2021 · October 22, 2021
Madelaine Boyd describes an approach that makes per-object and per-field permission checks part of Django’s ORM, so queries return only objects the current requester may see and saves or deletes fail without permission. The implementation stores the active requester, customizes models, managers, querysets, fields, descriptors,…