openedx-authz 0.6.0

Open edX AuthZ provides the architecture and foundations of the authorization framework.

openedx-authz

Purpose

Open edX AuthZ provides the architecture and foundations of the authorization framework. It implements the core machinery needed to support consistent authorization across the Open edX ecosystem.

This repository centralizes the architecture, design decisions, and reference implementation of a unified model for roles and permissions. It introduces custom roles, flexible scopes, and policy-based evaluation, aiming to replace the fragmented legacy system with a scalable, extensible, and reusable solution.

See the Product Requirements document for Roles & Permissions for detailed specifications and requirements.

Change Log

Unreleased

0.6.0 - 2025-10-22

Changed

• Use a SyncedEnforcer with default auto load policy.

Removed

• Remove Casbin Redis watcher from engine configuration.

0.5.0 - 2025-10-21

Added

• Default policy for Content Library roles and permissions.

Fixed

• Add plugin_settings in test settings.

• Update permissions for RoleListView.

0.4.1 - 2025-10-16

Fixed

• Load policy before adding policies in the loading script to avoid duplicates.

0.4.0 - 2025-16-10

Changed

• Initialize enforcer when application is ready to avoid access errors.

0.3.0 - 2025-10-10

Added

• Implementation of REST API for roles and permissions management.

0.2.0 - 2025-10-10

Added

• ADRs for key design decisions.

• Casbin model (CONF) and engine layer for authorization.

• Implementation of public API for roles and permissions management.

0.1.0 - 2025-08-27

Added

• Basic repo structure and initial setup.