{"categories":[{"label":"WWW/HTTP","url":"https://skillfed.io/packages/category/internet-www-http/5"}],"enrichment":{"capability":"Provides a generic security framework for implementing access control and permission policies on Python objects, with support for principals, permissions, and declarative security checks.","skillfed_tags":["access-control","zope-framework","declarative-security"],"use_cases":["Protect methods and attributes in Zope-based web applications with declarative permission checks","Implement role-based access control (RBAC) where different principals have different permissions on shared objects","Enforce security policies in content management systems or document repositories with hierarchical object structures","Audit and control who can access or modify sensitive business logic in multi-tenant applications","Define security rules centrally rather than scattering authorization checks throughout application code"],"what_it_does":"zope.security is a declarative security framework for Python that enforces access control policies on objects through permissions and principals. It provides decorators and configuration mechanisms to protect methods and attributes, making it possible to define who can do what with your code's objects without embedding authorization logic throughout your codebase.\n\nThe package is part of the Zope ecosystem and integrates deeply with zope.interface, zope.component, and related libraries. It's designed for applications that need fine-grained, policy-driven security\u2014particularly web frameworks and complex object systems where access control must be flexible and centrally managed. The framework has been in production use since 2007 and remains actively maintained.","worth_installing":"Yes, if you are building a Zope application or a Python system that requires declarative, policy-driven access control on objects. The framework is mature, actively maintained, and has no known vulnerabilities. However, it carries medium install friction and depends on the full Zope ecosystem, so it is best suited to projects already committed to that architecture. For simpler authorization needs or non-Zope frameworks, lighter alternatives may be more practical."},"id":"zope-security","links":{"html":"https://skillfed.io/packages/zope-security","md":"https://skillfed.io/packages/zope-security.md","pypi":"https://pypi.org/project/zope-security/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2025-11-17","license_spdx":"ZPL-2.1","license_treatment":"unclear","name":"zope.security","python_support":"supports_current","summary":"Zope Security Framework"},"popularity":{"monthly_downloads":197325,"position":9762,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"8.3"}