Django Packages : Permissions

Permissions

A grid of all packages implementing permissions for users and groups in your Django project.

Please fell free to verify and update features for listed apps or add another app if you know one.

Features currently being evaluated

Feature	Description
Object-level	Support for permissions assigned per object.
Django 1.2 backend	See: http://docs.djangoproject.com/en/dev/releases/1.2/#object-level-permissions .
Decorator	Object-level decorator for views.
Logical checks	Support for permission checked dynamically, e.g. can view entry no older than one month.
Database	Is a database required? If not, how are permissions stored?
Declaration	Do you declare permissions for models? How?
Assignment	How do you assign permissions for objects?
Templatetag	Permissions checks in templates via tags.
Inheritance	Permissions inheritance from related objects.
Roles	Support for roles in permissions.
Field level	Supports permissions at the field level of models
Cascade update	Support for cascade update of related objects, e.g. if added view or change perm for the product, then add view perm for the product category.
Any-to-any	Permissions for any object to any other object.
Model-level	Support for model-level perms (either on its own or by seamless integration with django.contrib.auth permissions).

Package	django-guardian	rules	django-role-permissions	django-permission	dry-rest-permissions	django-authority	django-rules	django-admin-view-permission	django-objectpermissions	django-prbac	django-rbac	django-rulez	django-permissionsx	carteblanche	Django-Access	django-tabular-permissions	django-global-permissions	django-extauth	django-hierarchical-auth	django-hats	django-permission-backend-nonrel	djangorestframework-api-key	django-field-permissions	django-trusts	django-improved-permissions	django-permissions	Django Debug Permissions	django-finegrained-permissions	giaola-role-permissions	django-rubberstamp	django-auth-utils	django_sieve	django-acl	django-acl	Django Object Permissions	django-generic-permissions	django-flexible-permissions	django-custodian	django-roles	django-pobject	django-http-451	django-bop	django-permissions-auditor

Package	django-guardian	rules	django-role-permissions	django-permission	dry-rest-permissions	django-authority	django-rules	django-admin-view-permission	django-objectpermissions	django-prbac	django-rbac	django-rulez	django-permissionsx	carteblanche	Django-Access	django-tabular-permissions	django-global-permissions	django-extauth	django-hierarchical-auth	django-hats	django-permission-backend-nonrel	djangorestframework-api-key	django-field-permissions	django-trusts	django-improved-permissions	django-permissions	Django Debug Permissions	django-finegrained-permissions	giaola-role-permissions	django-rubberstamp	django-auth-utils	django_sieve	django-acl	django-acl	Django Object Permissions	django-generic-permissions	django-flexible-permissions	django-custodian	django-roles	django-pobject	django-http-451	django-bop	django-permissions-auditor
Description	Per object permissions for Django	Awesome Django authorization, without the database	A django app for role based permissions.	An enhanced permission system which support object permission in Django	Rules based permissions for the Django Rest Framework	A Django app that provides generic per-object-permissions for Django's auth app and helpers to create custom permission checks.	Flexible and scalable Django authorization backend for unified per object permission management	Reusable application which provides a view permission for the existing models.	An app to add object-level/row-level permissions to users and groups. Each model can have different permissions.		Role-based Access Control (RBAC) implementation for management of permissions in Django. Allows a fine-grained (row level) permission assignment. Perfect for ...	A lean and mean object-level rules system for the Django framework	PermissionsX - Authorization for Django	Module to align code with thoughts of users and designers. Also magically handles navigation and permissio...	Django-Access - the application introducing dynamic evaluation-based instance-level (row-level) access rights control for Django	Display Django permissions in a tabular format that is translatable and easy customized.	Global permissions for Django	Extended authorization framework for Django, including field-level permissions and role-based permissions	Extends django auth allowing hierarchical permissions	Role-based permissions system for Django. Everyone wears a different hat, some people wear multiple.	An authentication backend that supports Django's user and group permissions on Django-nonrel	🔐 API Key permissions for the Django REST Framework	A starting place for field-level permissions	Django authorization add-on for multiple organizations and object-level permission settings	Django application made to make django's default permission system more robu...		Get a list of all user permissions available in the system	Permissions per field instead of per model for django	A django app for role based permissions.	Permissions manager and backend for Django 1.2, supporting object permissions and application-specific permissions.	Django authentication and authorization utilities	Serve user-wise data beautifully, minimally and correctly.	Access Control Lists for django aka per-row permissions. Largely inspired on phpBB's ACL. Support for roles.		This is an implementation of Object Permissions, a.k.a. row level permissions. Object Permissions allow you to assign a permission to ...	A simple Authentication Backend to manage specific permissions.	A Django app that combines object-level table permissions with model relations to avoid normalization of data while providing an extremely ...	The application django-custodian wrap and extend django.contrib.auth module providing a exaustive and granular approach to authorizations and permissions management. It ...	Django Roles with Role-Group-Permission-User	An expressive and concise mini permission module for Django views.	Django implementation for HTTP451	Basic Object-level Permissions for django 1.2+	Tool to audit access control on your django app.
Category	App	App	App	Framework	App	App	App	App	App	App	App	App	App	Other	App	App	App	App	App	App	App	App	App	App	App	Framework	App	Other	Other	App	App	App	App	App	App	App	App	App	App	Other	App	App	App
# Using This	60	11	4	3	2	3	3	3	0	0	0	6	1	1	2	1	0	0	1	1	3	0	0	1	2	5	0	0	1	0	1	0	0	0	0	1	2	0	1	1	0	0	0
Python 3?
Development Status	Production/Stable	Production/Stable	Production/Stable	Production/Stable	Production/Stable	Alpha	n/a	Production/Stable	Unknown	Alpha	Beta	Unknown	Production/Stable	Unknown	Beta	Production/Stable	Pre-Alpha	n/a	Unknown	Production/Stable	n/a	Beta	n/a	Beta	Unknown	Production/Stable	Beta	Beta	Production/Stable	n/a	Alpha	Pre-Alpha	n/a	Unknown	Unknown	Production/Stable	Unknown	n/a	Unknown	n/a	Unknown	Beta	Beta
Last updated	Nov. 1, 2018, 10:39 a.m.	Dec. 7, 2018, 6:50 a.m.	Dec. 2, 2018, 7:37 a.m.	March 28, 2017, 2:06 a.m.	Jan. 31, 2018, 9:27 a.m.	Jan. 13, 2019, 5:10 p.m.	July 16, 2011, 11:32 a.m.	Dec. 2, 2018, 4:45 p.m.	Oct. 8, 2010, 7:23 a.m.	July 31, 2018, 8:18 a.m.	March 31, 2010, 11:04 p.m.	Jan. 13, 2018, 2:04 p.m.	Nov. 3, 2017, 8:01 p.m.	July 3, 2014, 11:51 a.m.	Oct. 9, 2018, 4:03 a.m.	Oct. 8, 2018, 1:41 a.m.	Oct. 10, 2018, 1:11 p.m.	Dec. 10, 2011, 8:42 p.m.	Jan. 5, 2011, 3:03 p.m.	Nov. 19, 2017, 4:10 p.m.	April 9, 2011, 4:27 p.m.	Jan. 15, 2019, 3:41 a.m.	May 1, 2016, 3:25 a.m.	April 30, 2016, 3:17 a.m.	Nov. 27, 2018, 5:56 a.m.	June 21, 2015, 12:25 p.m.	June 6, 2017, 12:50 p.m.	Oct. 6, 2013, 2:36 p.m.	Aug. 28, 2018, 5:42 a.m.	Oct. 28, 2010, 6:27 p.m.	Nov. 15, 2017, 5:47 a.m.	June 4, 2014, 3:59 p.m.	Aug. 23, 2009, 4:17 p.m.	Oct. 8, 2015, 7:49 p.m.	June 6, 2013, 6:33 p.m.	Jan. 9, 2013, 10:47 p.m.	Dec. 10, 2015, 9:21 p.m.	Nov. 10, 2011, 7:31 p.m.	Jan. 28, 2015, 4:04 p.m.	March 4, 2011, 11:24 a.m.	Nov. 3, 2018, 5:13 a.m.	Oct. 20, 2011, 9:16 a.m.	Jan. 9, 2019, 1:48 p.m.
Version	1.4.9	2.0.1	2.2.1	1.0.4	0.1.10	0.13.2	n/a	1.9	0.3.3	0.0.7	0.9	1.0.2	2.0.0	1.0.0	n/a	2.2	0.2.4	n/a	1.4.6	1.1.2	n/a	0.3.1	n/a	0.10.3	0.2.2	1.2.2	1.0.0	0.0.1	1.2.0	n/a	0.1.1	1.0.0	n/a	0.1.3	1.4.6	0.1.0	1.0.7	n/a	0.0.4	n/a	0.1	0.3	0.3.3
Repo	Github	Github	Github	Github	Github	Github	Github	Github	Github	Github	Bitbucket	Github	Github	Github	Github	Github	Github	Bitbucket	Github	Github	Bitbucket	Github	Github	Github	Github	Github	Github	Github	Github	Github	Github	Github	Bitbucket	Github	Github	Github	Github	Bitbucket	Github	Bitbucket	Github	Github	Github
Commits
Stars	2086	790	312	287	267	183	149	132	86	77	65	62	39	38	30	25	25	21	19	17	16	14	13	13	12	12	11	10	7	7	6	5	5	5	4	4	3	3	2	2	2	2	n/a
Repo Forks	423	66	63	43	34	48	9	41	8	28	4	16	4	2	1	7	5	2	7	n/a	n/a	2	6	2	1	11	2	2	n/a	n/a	n/a	1	2	1	2	1	1	n/a	n/a	n/a	1	n/a	n/a
Participants	lukaszb brianmay ad-m michael-k bsvetchine mitar ggreer troygrosfield xordoquy emperorcezar more...	dfunckt dyve ticosax mlsen thedrow orf jacobh jerebenitez revolunet bulv1ne more...	filipeximenes powderflask kavdev reduxionist fjsj andersonresende victorgutemberg aarcro benvdh drxos more...	lambdalisue giginet quasiyoke argsno jongyulin oskarjakiela philippeowagner Simanas AmbientLighter SalahAdDin more...	dbkaplan AlexandreCollet mbaragiola ttill wernerhp abeniwal GerardPaligot marctc vovanbo yusuf-tengroup more...	jezdez jlward bartTC winhamwr bocribbz gthb safwanrahman remik diegobz RDIL more...	maraujop jjmaestro	lefterisnik Anton-Shutik awgreenblatt michi88 pieterdd ciarancourtney kapucko lanterno crazyscientist pinerojuancruz more...	justquick jazzido bhuztez	nickpell kennknowles millerdev czue biyeun GertBurger NoahCarnahan ArtemBernatskyy snopoke benrudolph more...	nabucosound	chrisglass maraujop jjmaestro stefanfoulis nigma juandecarrion mitchellrj amites bashu DanLipsitt more...	robpogorzelski adi-	neuman lightstrike	nnseva	RamezIssac ihabhussein vintage	eduardo-matos PeRDy	mhall119	rasca	miketheredherring	fhahn	florimondmanca	tiliv	thomasyip core2duo suhailvs	gabrielbiasi	diefenbach	timonweb	specialunderwear PetrDlouhy	filipeximenes g20ready reduxionist fjsj andersonresende victorgutemberg aarcro drxos jamespenick myonov more...	paltman	pjdelport		tyrion		kreneskyp bramwelt MostAwesomeDude JonahBrooks bsu Kennric chancez edunham	garrypolley	staab	fabiomichelini	cenkbircanoglu	phuihock		pterk	kluchrj
Documentation		N/A					N/A		N/A	N/A	N/A	N/A		N/A		N/A	N/A		N/A		N/A	N/A	N/A		N/A		N/A	N/A		N/A	N/A		N/A		N/A	N/A		N/A		N/A	N/A
Object-level																				, In conjunction with django-guardian since `Groups` can be used.				✅ ✅ django-trusts always works as an annexation; all features require no patched class of any sort, works with all existing builtin auth features: authorization, permission, group, contenttypes; option to use junction table mechanism: no moditication to any existing model.
Django 1.2 backend
Decorator				Works as class/method/functional decorator.									This package operates on view level.											Implemented: @permission_required('app.read_project', fieldlookups_kwargs={'pk': 'project_id'})												django.contrib.auth.decorators.permission_required
Logical checks				each model have PermissionHandler for them and has_perm method will be called for paricular model.																				via lambda registered with model (i.e., Content.register_permission_condition(Receipt, 'own', lambda u, p, o: u == o.user)) @permission_required('app.change_receipt:own', fieldlookups_kwargs={'pk': 'pk'})													No, though it's extensible enough to add that easily.
Database		registry of callables		it use 'Logic' based permission system which is completely different from general permission system.																				implementation optimized to reduce db hits per http request
Declaration		registry of callables	permissions are defined by role.	registration. Each model can be registered with Handler for them		, permission classes			, registration			as a method in the same model	Permissions are declared for views.							, Role class inheritance				via django's permission model: app.change_xyz, app.add_xyz, app.delete_xyz or any custom permissions	, using the same method as auth Django system.										, registration dynamically creates permission models	permissions are view and function level permissions	Yes, by creating a role-agent-entity entry, combined with checking optional model relations.	, global permissions in settings and model permission as canonical auth
Assignment	manager + patched User and Group + shortcut function + Admin Integration (with ModelAdmin extension)	irrelevant	, utils functions	Add builtin PermissionLogic subclass or your own PermissionLogic subclass to the target model class.		permission classes instances + admin (action) + custom views			patched User and Group		manager	In the same model as a method which takes the User as argument and returns True or False	Permissions are not assigned to models.											via Models or Django Admin UI (upcoming: REST api via tastypie)	using shortcuts functions and mixins for Users and Objects	utils functions							utils functions		patched User and Group or util functions	use the provided add_permission backend from django_generic_permissions.backends import add_permission add_permission('foo', logged_in_user)	By creating a Permission record, mapping actions to roles, and defining permission inheritance via relations.	, complete API and GUI
Templatetag				You can use like {% if user has 'auth.change_user' of object %}								not needed as it is integrated with django.contrib.auth permissions												supports django's builtins	, has_perm										, limited functionality
Inheritance		irrelevant		for PermissionLogic class																				Can be achieve with two methods: a) by register the model with field lookup path from another permissible model (i.e., Content.register_content(ReceiptImage, '%s__image' % Content.get_content_fieldlookup('app.Receipt')), or b) by sharing the same `trust` between depended / dependent objects	, full inheritance defining the "parents" of the model.													, from parent container
Roles		irrelevant		if you add a PermissionLogic class like http://bit.ly/1z22IGl																				Role is specified in model's meta and management commands updates db entires and makes it available for permission check	, is actually required to have roles.													, assimilated by groups
Field level			, define it in a object level checker.										Objects are assigned to request and they can be compared to other values by attributes or methods.											?
Cascade update		irrelevant		Can be									Depends on implementation.											supports updating of multiple object permissions via `trust` and multiple users via django's `auth.models.Group`	, the inheritance system also handle this behavior.
Any-to-any				Can be																				Same mechanism as Inheritance	, only User-to-any
Model-level						, integration					, own	integrated with django.contrib.auth permissions												design to be used alongside with Django's builtin auth ModelBackend	, using role classes with models=ALL_MODELS								, own			this works independent of Django models intentionally		, own and integrated