DjangoObjectPermissions

这个权限类与 Django 的标准对象权限框架相关联，该框架允许对模型进行每个对象的权限。为了使用这个权限类，你还需要添加一个支持对象级权限的权限后端，比如 django-guardian

与 一样，此权限只能应用于具有属性或方法的视图。仅当用户经过身份验证并分配了相关的每对象权限和相关模型权限时，才会授予授权。DjangoModelPermissions.queryset.get_queryset()

POST请求要求用户具有对模型实例的权限。add PUT请求要求用户具有对模型实例的权限。PATCH change DELETE请求要求用户具有对模型实例的权限。delete 请注意，它不需要包，并且应该同样支持其他对象级后端。DjangoObjectPermissions django-guardian

与此一样，您可以通过重写和设置属性来使用自定义模型权限。有关详细信息，请参阅源代码。DjangoModelPermissions DjangoObjectPermissions .perms_map

注意：如果你需要 的对象级权限和 请求，并且正在使用 django-guardian 作为对象级权限的后端，你需要考虑使用 djangorestframework-guardian2 包提供的类。它确保列表终结点仅返回结果，包括用户具有适当查看权限的对象。 view GET HEAD OPTIONS DjangoObjectPermissionsFilter

django-guardian

To install django-guardian simply run:

pip install django-guardian

Configuration We need to hook django-guardian into our project.

Put guardian into your INSTALLED_APPS at settings module:

INSTALLED_APPS = (
 ...
 'guardian',
)

Add extra authorization backend to your settings.py:

AUTHENTICATION_BACKENDS = (
    'django.contrib.auth.backends.ModelBackend', # default
    'guardian.backends.ObjectPermissionBackend',
)

Create guardian database tables by running:

python manage.py migrate

Usage After installation and project hooks we can finally use object permissions with Django.

Lets start really quickly:

>>> from django.contrib.auth.models import User, Group
>>> jack = User.objects.create_user('jack', 'jack@example.com', 'topsecretagentjack')
>>> admins = Group.objects.create(name='admins')
>>> jack.has_perm('change_group', admins)
False
>>> from guardian.models import UserObjectPermission
>>> UserObjectPermission.objects.assign_perm('change_group', jack, obj=admins)
<UserObjectPermission: admins | jack | change_group>
>>> jack.has_perm('change_group', admins)
True
Of course our agent jack here would not be able to change_group globally:

>>> jack.has_perm('change_group')
False

Admin integration Replace admin.ModelAdmin with GuardedModelAdmin for those models which should have object permissions support within admin panel.

For example:

from django.contrib import admin
from myapp.models import Author
from guardian.admin import GuardedModelAdmin

# Old way:
#class AuthorAdmin(admin.ModelAdmin):
#    pass

# With object permissions support
class AuthorAdmin(GuardedModelAdmin):
    pass

admin.site.register(Author, AuthorAdmin)