• Repository
• Stars:
• Forks:
• Open issues:
• Open PRs:

Meta

• License: BSD License (BSD-2-Clause)
• Author:Chris Maggiuli, Bona Fide IT GmbH, Columbia University, SIS Development and Application Services
• Maintainer:Michael K., Chris Maggiuli, Bona Fide IT GmbH
• Tags django, permissions, authorization, object, row, level
• Requires: Python >=3.9

Classifiers

• Development Status
  • 5 - Production/Stable
• Environment
  • Web Environment
• Framework
  • Django
  • Django :: 3.2
  • Django :: 4.1
  • Django :: 4.2
  • Django :: 5.0
  • Django :: 5.1
  • Django :: 5.2
• Intended Audience
  • Developers
• License
  • OSI Approved :: BSD License
• Operating System
  • OS Independent
• Programming Language
  • Python
  • Python :: 3 :: Only
  • Python :: 3.9
  • Python :: 3.10
  • Python :: 3.11
  • Python :: 3.12
  • Python :: 3.13
• Topic
  • Security
  • Software Development :: Libraries :: Python Modules

django-guardian

django-guardian is an implementation ofper-object permissions on topof Django’s authorization backend. Read an introduction to per-object permissionson djangoadvent articles.

Documentation

Online documentation is available athttps://django-guardian.readthedocs.io/.

Installation

To installdjango-guardian into your project run:

uvadddjango-guardian

TIP: Not using a package manager likeuv orpoetry for your django project? You probably should try them :). In the meantime,pip install django-guardian works just fine too.

Configuration

We need to hookdjango-guardian into our project.

1. Putguardian into yourINSTALLED_APPS at settings module:

INSTALLED_APPS=(...'guardian',)

2. Add extra authorization backend to yoursettings.py:

AUTHENTICATION_BACKENDS=('django.contrib.auth.backends.ModelBackend','guardian.backends.ObjectPermissionBackend',)

3. Createguardian database tables by running:

python manage.py migrate

Usage

After installation and project hooks we can finally use object permissionswith Django.

Lets start really quickly:

>>>fromdjango.contrib.auth.modelsimportUser,Group>>>jack=User.objects.create_user('jack','jack@example.com','topsecretagentjack')>>>admins=Group.objects.create(name='admins')>>>jack.has_perm('change_group',admins)False>>>fromguardian.shortcutsimportassign_perm>>>assign_perm('change_group',jack,obj=admins)<UserObjectPermission:admins|jack|change_group>>>>jack.has_perm('change_group',admins)True

Of course our agent jack here would not be able tochange_group globally:

>>>jack.has_perm('change_group')False

Admin integration

Replaceadmin.ModelAdmin withGuardedModelAdmin for those modelswhich should have object permissions support within admin panel.

For example:

fromdjango.contribimportadminfrommyapp.modelsimportAuthorfromguardian.adminimportGuardedModelAdmin# Old way:#class AuthorAdmin(admin.ModelAdmin):#    pass# With object permissions supportclassAuthorAdmin(GuardedModelAdmin):passadmin.site.register(Author,AuthorAdmin)

Django Unfold integration

Users ofdjango-unfold will find thatguardian issupported out of the box via acontrib module.

Verified details

Project links

• Changelog
• Homepage
• Repository

GitHub Statistics

Maintainers

adobrawy

LukaszBalcerzak

penguin_brian

thclark

Unverified details

Project links

• Documentation
• Issues

• Download URL:django_guardian-3.2.0.tar.gz
• Upload date: Sep 16, 2025
• Size: 99.9 kB
• Tags: Source
• Uploaded using Trusted Publishing? Yes
• Uploaded via: twine/6.1.0 CPython/3.13.7

See more details on using hashes here.

• Download URL:django_guardian-3.2.0-py3-none-any.whl
• Upload date: Sep 16, 2025
• Size: 134.7 kB
• Tags: Python 3
• Uploaded using Trusted Publishing? Yes
• Uploaded via: twine/6.1.0 CPython/3.13.7

See more details on using hashes here.