casl-django 0.2

Django module for converting regular django permissions to CASL-Style rules

CASL Django is an app that converts the usual Django permissions to CASL-Style rules.

CASL is an isomorphic authorization JavaScript library: https://github.com/stalniy/casl/

Example

Having a rule called my_app.change_item, will generate a CASL rule:

{
    subject: 'my_app/item',
    action: 'change'
}

If you have more than one rule for the same subject, for example:

my_app.change_item
my_app.add_item
my_app.remove_item

This will generate:

{
    subject: 'my_app/item',
    actions: ['add', 'change', 'remove']
}

Configuration

By default, the length for subject and action fields is 128 characters, you can increase the length of them by adding to your settings file:

CASL_DJANGO = {
    'subject-length': 256,
    'action-length': 256
}

Custom Permissions

Sometimes you’d like to have custom permissions for your users, given this, you can add to your user using the Permission’s add_permission class method:

from casl_django.casl.permissions import Permissions

...

my_custom_permission = Permissions.create(subject="navigation", action="index")

...

Permissions.set_user_permission(user=user, permission=my_custom_permission)

Or you can import casl_django.models.UserPermission and create objects as desired.

Filtering

The view by default filters subject with iexact and action with icontains, you can call the url with: ?subject=navigation&action=users-roles, this would return:

[
    {"subject": "navigation", action: "user-roles-index"},
    {"subject": "navigation", action: "user-roles-list"},
    {"subject": "navigation", action: "user-roles-id"}
]

Quick start

1. Add “casl_django” to your INSTALLED_APPS setting like this:

   INSTALLED_APPS = [
       ...
       'casl_django',
   ]

2. Use the included views to generate your desired urls:

   from casl_django.views import UserPermissionsView
   
   ...
   
   url(r'/api/casl/user/', UserPermissionsView.as_view())

3. Run python manage.py migrate to create the models.