django-permissionedforms

What it is and what it does

django-permissionedforms is a lightweight Django forms extension that lets you declaratively control which fields appear in a form based on the logged-in user's permissions. Instead of manually filtering fields in view code, you define a `field_permissions` dict in the form's Meta class, mapping field names to Django permission codenames. When you instantiate the form with `for_user=request.user`, fields the user lacks permission for are automatically omitted from the form.

The package provides two base classes: `PermissionedForm` for regular forms and `PermissionedModelForm` for model forms. It also exposes a metaclass and mixin for integrating permission handling into other custom form base classes. The permission check uses Django's standard `user.has_perm()` method, so it respects superuser status and custom permission backends. However, the package has been abandoned since its first release on 2022-02-28 and receives no maintenance or updates.

Use it for

• Build admin or data-entry forms where certain fields (e.g., salary, status) are only visible to users with specific permissions.
• Create multi-role forms where editors see different fields than reviewers, without duplicating form logic in views.
• Restrict sensitive fields in ModelForms to superusers or staff by using arbitrary codenames like 'superuser'.
• Integrate permission-based field visibility into Wagtail or other Django-based CMS forms using multiple inheritance.

Worth the install?

AI-flagged interpretation of the facts on this page. Verify before relying on it.

Install

django-permissionedforms on PyPI

Before you install

Low install friction with a single Django dependency. However, the package is abandoned—last release was 2022-02-28 and last commit 2022-03-16. No active maintenance or security updates.

Requires Django as a runtime dependency; form fields will only be conditionally hidden if the for_user parameter is passed at instantiation.

License in practice

BSD license is permissive and poses no restrictions on use, modification, or distribution in most contexts.

Quickstart

pip install django-permissionedforms

from permissionedforms import PermissionedForm
from django import forms

class PersonForm(PermissionedForm):
    first_name = forms.CharField()
    last_name = forms.CharField()
    class Meta:
        field_permissions = {'last_name': 'myapp.change_last_name'}

form = PersonForm(for_user=request.user)

Package facts

Evidence: django_permissionedforms-0.1-py2.py3-none-any.whl

Tags

More Dynamic Content packages

See also dry-rest-permissions · drf-access-policy · django-ace · djangorestframework-guardian · rest_condition · django-ckeditor-5 · django-bootstrap-datepicker-plus · django-enumfields · django-impersonate · zope.security