{"categories":[{"label":"WWW/HTTP","url":"https://skillfed.io/packages/category/internet-www-http/7"}],"enrichment":{"capability":"Defines rules-based permissions for Django REST Framework APIs by writing permission logic directly on models, supporting both global (table-level) and object-level (row-level) access control.","skillfed_tags":["django-rest-framework","access-control","abandoned"],"use_cases":["Build multi-tenant SaaS apps where permissions depend on ownership, association membership, or role relationships that change frequently.","Define row-level access control for complex data models without maintaining explicit permission tables.","Grant different permissions for different actions on the same model (e.g., allow all users to create but only owners to update).","Implement permission rules that depend on related object state (e.g., a user can edit a project if they are an admin of the owning organization)."],"what_it_does":"dry-rest-permissions provides a framework for defining access control rules in Django REST Framework by attaching permission logic directly to your models rather than storing explicit permission grants in a separate table. Instead of requiring you to maintain a permissions table that must be updated whenever relationships change (e.g., when a user's admin status changes or ownership transfers), you write methods on your model that evaluate the current database state to determine whether a user can perform an action.\n\nThe package supports both global permissions (whether a user can perform an action on any object in a table) and object-level permissions (whether a user can perform an action on a specific row). It groups actions into read (list, retrieve) and write (create, update, destroy) categories, but also lets you define permissions for specific custom actions. You add the DRYPermissions class to your viewset, then define methods like `has_read_permission()` and `has_object_update_permission()` on your model to control access.","worth_installing":"No. The package is abandoned (last release 2018-01-31, no commits since 2022-12-26) and supports only Django 1.8\u20132.0 and DRF 3.5\u20133.7, which are far out of support. Modern Django and DRF projects have no upgrade path. Install only if maintaining legacy code on those exact versions."},"id":"dry-rest-permissions","links":{"html":"https://skillfed.io/packages/dry-rest-permissions","md":"https://skillfed.io/packages/dry-rest-permissions.md","pypi":"https://pypi.org/project/dry-rest-permissions/"},"maintenance":{"status":"abandoned"},"meta":{"latest_release":"2018-01-31","license_spdx":null,"license_treatment":"permissive","name":"dry-rest-permissions","python_support":"unspecified","summary":"Rules based permissions for the Django Rest Framework"},"popularity":{"monthly_downloads":88424,"position":13730,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.1.10"}
