CODEWITHSUNDEEP
djangodjango-modelsdjango-permissions
nemesifier
nemesifier

Reputation: 8529

Does Django's permission system give advantages with custom Access Levels for a community webapp?

Django permissions are great if you need to let someone access the admin and restrict what they can do.

But what if I want to use a similar functionality in the frontend of an application?

Example:

model Group has its own Members, a member can have three different access levels:

  1. member
  2. admin
  3. super-admin

Admins can only do special stuff only for their groups though, not for all the groups.

So I was wondering, would it have sense to implement Django's permission system in these cases? Would it have any advantage than simply adding a choice field in the Member model that indicates the access levels and checking that?

Upvotes: 2

Views: 241

Answers (1)

Mariusz Jamro
Mariusz Jamro

Reputation: 31663

The permissions system is built-in, ready-to-use. Nonetheless the most important fact is that it already is really simple and easy to use. You have groups and permissions assigned to a user and methods for checking/adding those permissions. Nothing more.

Writing your own permission system will have no real benefit over the Django's. It won't save you any time, as you'll still need one line of code to check the permission. Additionally the single-field access level permissions might be a constraint in the future. As your site will grow you'll definitely need more complex permission system.

Upvotes: 1

Related Questions