Authorization in Django: From Permissions to Policies — Part 9 — Policies: Making Context Explicit
From Capability to Contextual Validity

From Capability to Contextual Validity

Where Permissions End, Authorization Continues

Boundaries of Capability in Django Authorization

Scaling Authorization by Freezing the Permission Boundary

Stable Identities for Deterministic Permission Resolution

Once we stop treating permissions as rules and start treating them as data, a natural question follows: Data about what? A permission is a label that says, *“*this action applies to that thing.” But how does Django identify that thing—especially in a...
