django-guardian

django-guardian is an implementation of per-object permissions on top of Django’s authorization backend. Read an introduction to per-object permissions on djangoadvent articles.

Documentation

Online documentation is available at https://django-guardian.readthedocs.io/.

See real-world usage: Check out Who Uses Guardian to see how thousands of projects worldwide use django-guardian in production.

Contributing

Please read CONTRIBUTING.md before opening a pull request. It documents the repository's issue-first workflow, branch targeting rules, local uv setup, required test and lint commands, documentation expectations, and AI/LLM contribution policy.

If you need to report a security issue, do not open a public issue. Follow SECURITY.md and use the repository's private vulnerability reporting flow.

Installation

To install django-guardian into your project run:

uv add django-guardian

TIP: Not using a package manager like uv or poetry for your django project? You probably should try them :). In the meantime, pip install django-guardian works just fine too.

Configuration

We need to hook django-guardian into our project.

Put guardian into your INSTALLED_APPS at settings module:

INSTALLED_APPS = (
    ...
    'guardian',
)

Add extra authorization backend to your settings.py:

AUTHENTICATION_BACKENDS = (
    'django.contrib.auth.backends.ModelBackend',
    'guardian.backends.ObjectPermissionBackend',
)

Create guardian database tables by running:

python manage.py migrate

Usage

After installation and project hooks we can finally use object permissions with Django.

Lets start really quickly:

>>> from django.contrib.auth.models import User, Group
>>> jack = User.objects.create_user('jack', 'jack@example.com', 'topsecretagentjack')
>>> admins = Group.objects.create(name='admins')
>>> jack.has_perm('change_group', admins)
False
>>> from guardian.shortcuts import assign_perm
>>> assign_perm('change_group', jack, obj=admins)
<UserObjectPermission: admins | jack | change_group>
>>> jack.has_perm('change_group', admins)
True

Of course our agent jack here would not be able to change_group globally:

>>> jack.has_perm('change_group')
False

Admin integration

Replace admin.ModelAdmin with GuardedModelAdmin for those models which should have object permissions support within admin panel.

For example:

from django.contrib import admin
from myapp.models import Author
from guardian.admin import GuardedModelAdmin

# Old way:
#class AuthorAdmin(admin.ModelAdmin):
#    pass

# With object permissions support
class AuthorAdmin(GuardedModelAdmin):
    pass

admin.site.register(Author, AuthorAdmin)

Django Unfold integration

Users of django-unfold will find that guardian is supported out of the box via a contrib module.

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

django_guardian-3.4.0.tar.gz (111.7 kB view details)

Uploaded Aug 28, 2026 Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

django_guardian-3.4.0-py3-none-any.whl (148.1 kB view details)

Uploaded Aug 28, 2026 Python 3

File details

Details for the file django_guardian-3.4.0.tar.gz.

File metadata

Download URL: django_guardian-3.4.0.tar.gz
Upload date: Aug 28, 2026
Size: 111.7 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for django_guardian-3.4.0.tar.gz
Algorithm	Hash digest
SHA256	`f7bd2d673c018e28970c6f98a5bdeeaaf294b9ca7726586695cff01f15db7ef0`
MD5	`a7f69c2b838a3157613c3a57a49ba8c0`
BLAKE2b-256	`89c70a2cea15a432bd97fffa50b0a01be6018e30b9cdb9775ce33c41f6994fb5`

See more details on using hashes here.

Provenance

The following attestation bundles were made for django_guardian-3.4.0.tar.gz:

Publisher: release-publish.yml on django-guardian/django-guardian

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: django_guardian-3.4.0.tar.gz
- Subject digest: f7bd2d673c018e28970c6f98a5bdeeaaf294b9ca7726586695cff01f15db7ef0
- Sigstore transparency entry: 2624549119
- Sigstore integration time: Aug 28, 2026
Source repository:
- Permalink: django-guardian/django-guardian@bd0882169ee3df6a31d5718b3f848e7470694287
- Branch / Tag: refs/heads/main
- Owner: https://github.com/django-guardian
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: release-publish.yml@bd0882169ee3df6a31d5718b3f848e7470694287
- Trigger Event: workflow_dispatch