libcan 0.1.1

Pythonic Role-Based Access Control with libcan-compatible state serialisation

libcan-python — Pythonic Role‑Based Access Control

A clean, thread‑safe RBAC engine that is fully compatible with the C libcan library at the serialisation level.

Features

• Add users, assign / revoke roles
• Allow and deny rules with fnmatch glob patterns (*, ?, [seq])
• Deny‑takes‑precedence semantics
• Thread‑safety built‑in
• Lazy loading from storage; automatic commit() / push()
• libcan‑identical state format – you can exchange state blobs between C and Python
• No external dependencies

Installation

pip install libcan

uv add libcan

uv pip install libcan

Quick start

from libcan import AccessControl, MemoryStorage

ac = AccessControl(MemoryStorage())
ac.add_user("alice")
ac.add_role("alice", "admin")
ac.allow("admin", "read:*", "*.txt")
ac.deny("admin", "read:secret", "*.txt")

if ac.allowed("alice", "read:file", "doc.txt"):
    print("Access granted")

ac.commit()   # persist
ac.close()

Storage backends

Implement the libcan.Storage abstract class to connect any database or file system.

License

MIT