django-abac

Attribute-based access control for Django

View the Project on GitHub Weltraum/django-abac

Combining algorithms

С комбинационными алгоритмами можно познакомиться в стандарте XACML

Из него на данный момент реализовано 4:

PERMIT_UNLESS_DENY

  permit deny not_applicable indeterminate
permit permit deny permit permit
deny deny deny deny deny
not_applicable permit deny permit permit
indeterminate permit deny permit permit

DENY_UNLESS_PERMIT

  permit deny not_applicable indeterminate
permit permit permit permit permit
deny permit deny deny deny
not_applicable permit deny deny deny
indeterminate permit deny deny deny

PERMIT_OVERRIDES

  permit deny not_applicable indeterminate
permit permit permit permit permit
deny permit deny deny indeterminate
not_applicable permit deny not_applicable indeterminate
indeterminate permit indeterminate indeterminate indeterminate

DENY_OVERRIDES

  permit deny not_applicable indeterminate
permit permit deny permit indeterminate
deny deny deny deny deny
not_applicable permit deny not_applicable indeterminate
indeterminate indeterminate deny indeterminate indeterminate

Оглавление

  1. Quick start
  2. Project architecture
  3. Authentication
  4. Rules
  5. Combining algorithms