home / grids / Permissions
A grid of all packages implementing permissions for users and groups in your Django project.
Please fell free to verify and update features for listed apps or add another app if you know one.
Features currently being evaluated
| Feature | Description |
|---|---|
| Object-level | Support for permissions assigned per object. |
| Django 1.2 backend | See: http://docs.djangoproject.com/en/dev/releases/1.2/#object-level-permissions . |
| Declaration | Do you declare permissions for models? How? |
| Decorator | Object-level decorator for views. |
| Templatetag | Permissions checks in templates via tags. |
| Iheritance | Permissions inheritance from related objects. |
| Roles | Support for roles in permissions. |
| Logical checks | Support for permission checked dynamically, e.g. can view entry no older than one month. |
| Cascade update | Support for cascade update of related objects, e.g. if added view or change perm for the product, then add view perm for the product category. |
| Any-to-any | Permissions for any object to any other object. |
| Assignment | How do you assign permissions for objects? |
| Model-level | Support for model-level perms (either on its own or by seamless integration with django.contrib.auth permissions). |
| Package | django-guardian | django-authority | django-permissions | django-rulez | django-permission-backend-nonrel | django-rules | django-hierarchical-auth | django-permission | django-pobject | django-acl | django-custodian | django-extauth | django-objectpermissions | Django Object Permissions | django-rbac | django-rubberstamp |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Description |
Implementation of per object permissions for Django 1.2+ |
A Django app that provides generic per-object-permissions for Django's auth app and helpers to create custom permission checks. |
A lean and mean object-level rules system for the Django framework |
An authentication backend that supports Django's user and group permissions on Django-nonrel |
Flexible and scalable Django authorization backend for unified per object permission management |
Extends django auth allowing hierarchical permissions |
An enhanced permission system which support object permission in Django |
An expressive and concise mini permission module for Django views. |
Access Control Lists for django aka per-row permissions. Largely inspired on phpBB's ACL. Support for roles. |
The application django-custodian wrap and extend django.contrib.auth module providing a exaustive and granular approach to authorizations and permissions management. It ... |
Extended authorization framework for Django, including field-level permissions and role-based permissions |
An app to add object-level/row-level permissions to users and groups. Each model can have different permissions. |
Role-based Access Control (RBAC) implementation for management of permissions in Django. Allows a fine-grained (row level) permission assignment. Perfect for ... |
Permissions manager and backend for Django 1.2, supporting object permissions and application-specific permissions. | ||
| Category | App | App | Framework | App | App | App | App | Framework | Other | App | App | App | App | App | App | App |
| # Using This | 9 | 4 | 4 | 4 | 3 | 2 | 1 | 1 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| Downloads | 17921 | 7141 | 6442 | 2228 | n/a | n/a | 4064 | 4341 | n/a | n/a | n/a | n/a | 568 | 4064 | 534 | n/a |
| Last updated | Feb. 22, 2012, 7:25 a.m. | Jan. 16, 2010, 1:53 a.m. | May 18, 2011, 9:23 a.m. | March 6, 2012, 8:17 a.m. | April 9, 2011, 4:27 p.m. | July 16, 2011, 11:32 a.m. | Jan. 5, 2011, 10:03 a.m. | March 5, 2012, 12:29 a.m. | March 4, 2011, 11:24 a.m. | Aug. 23, 2009, 4:17 p.m. | Nov. 10, 2011, 7:31 p.m. | Dec. 10, 2011, 8:42 p.m. | Oct. 8, 2010, 7:23 a.m. | March 31, 2010, 11:04 p.m. | Oct. 21, 2010, 11:45 a.m. | |
| Version | 1.0.4 | 0.4 | 1.0b4 | 0.2.5 | n/a | n/a | 1.4.2 | 0.4.5 | n/a | n/a | n/a | n/a | 0.3.3 | 1.4.2 | 0.9 | n/a |
| Repo | Github | Bitbucket | Bitbucket | Github | Bitbucket | Github | Github | Github | Bitbucket | Bitbucket | Bitbucket | Bitbucket | Github | Other | Bitbucket | Github |
| Commits | ||||||||||||||||
| Repo Watchers | 223 | 87 | 3 | 23 | 16 | 100 | 3 | 7 | 1 | 5 | 2 | 21 | 69 | n/a | 56 | 4 |
| Repo Forks | 39 | 10 | 2 | 8 | n/a | 7 | 2 | 2 | n/a | n/a | n/a | 1 | 7 | n/a | 2 | n/a |
| Participants | lukaszb bmihelac funkaoshi rafadev nvie pipoket petrilli Tecuya fairview sneawo more... | jezdez | diefenbach | chrisglass maraujop jjmaestro stefanfoulis nigma juandecarrion DanLipsitt amites | fhahn | maraujop jjmaestro chrisglass msiedlarek | rasca | lambdalisue duilio | phuihock | tyrion | fabiomichelini | mhall119 | coordt josesoa rlewko toddstowell twtwebdev wavrin justquick jazzido bhuztez | nabucosound | MidwestCommunications paltman | |
| Docs on RTD | Checking... | Checking... | Checking... | Checking... | Checking... | Checking... | Checking... | Checking... | Checking... | Checking... | Checking... | Checking... | Checking... | Checking... | Checking... | Checking... |
| Package | django-guardian | django-authority | django-permissions | django-rulez | django-permission-backend-nonrel | django-rules | django-hierarchical-auth | django-permission | django-pobject | django-acl | django-custodian | django-extauth | django-objectpermissions | Django Object Permissions | django-rbac | django-rubberstamp |
| Object-level |  | | | |  | | | | | | | |||||
| Django 1.2 backend | | | | | | | | | | | | |||||
| Declaration | | , permission classes | | as a method in the same model | registration. Each model can be registered with Handler for them | | , global permissions in settings and model permission as canonical auth | , registration | , registration dynamically creates permission models | | ||||||
| Decorator | | | | | Works as class/method/functional decorator. | | | | | | ||||||
| Templatetag | | | | not needed as it is integrated with django.contrib.auth permissions | You can use like {% if user has 'auth.change_user' of object %}
| | | | , limited functionality | | ||||||
| Iheritance | | | | | for Role | | , from parent container | | | | ||||||
| Roles | | | | | | | , assimilated by groups | | | | ||||||
| Logical checks | | | | | each model have PermissionHandler for them and has_perm method will be called for paricular model. | | | | | | ||||||
| Cascade update | | | | Can be | | | | | | |||||||
| Any-to-any | | | | Can be | | | | | | |||||||
| Assignment | manager + patched User and Group + shortcut function
+ Admin Integration (with ModelAdmin extension) | permission classes instances + admin (action) + custom views | utils functions | In the same model as a method which takes the User as argument and returns True or False | Add Role in Admin or Create PermissionHandler for particular model to logically check permission for each instance/permission/user | utils functions | , complete API and GUI | patched User and Group | patched User and Group or util functions | manager | ||||||
| Model-level | | , integration | | integrated with django.contrib.auth permissions | | , own | , own and integrated | | | , own | ||||||
| Package | django-guardian | django-authority | django-permissions | django-rulez | django-permission-backend-nonrel | django-rules | django-hierarchical-auth | django-permission | django-pobject | django-acl | django-custodian | django-extauth | django-objectpermissions | Django Object Permissions | django-rbac | django-rubberstamp |