Authorization in Django: From Permissions to Policies — Part 13 (Capstone) — Authorization Is Not Security
On Boundaries, Guarantees, and the Limits of Authorization
On Boundaries, Guarantees, and the Limits of Authorization
Once we stop treating permissions as rules and start treating them as data, a natural question follows: Data about what? A permission is a label that says, *“*this action applies to that thing.” But how does Django identify that thing—especially in a...
