pycasbin/django-authorization-example

Example for django-authorization middleware

Django-Authorization Example

Django-authorization, or dauthz is an authorization library for Django framework.

How To Run the Example

pip install -r requirements.txt
python manage.py makemigrations
python manage.py migrate
python manage.py runserver

Configure of Example: by step

1.add the django-orm-adapter and dauthz to INSTALLED_APPS

INSTALLED_APPS = [
    ...
    # STEP1: setup adapter(django-orm-adapter here)
    'casbin_adapter.apps.CasbinAdapterConfig',
    # STEP2: setup django-authorization
    'dauthz.apps.DauthzConfig',
    # STEP3: setup the app of your app
    'user_management.apps.UserManagementConfig',
    ...
]

2.add the middlewares you need to MIDDLEWARES

MIDDLEWARE = [
    ...
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    # STEP2: setup django-authorization
    # be aware: should after AuthenticationMiddleware
    "dauthz.middlewares.request_middleware.RequestMiddleware",
    ...
]

3.add more config of adapter and dauthz

# STEP1: setup adapter(django-orm-adapter here)
CASBIN_MODEL = os.path.join(BASE_DIR, 'dauthz_model.conf')
# STEP2: setup django-authorization
DAUTHZ = {
    # DEFAULT Dauthz enforcer
    "DEFAULT": {
        # Casbin model setting.
        "MODEL": {
            # Available Settings: "file", "text"
            "CONFIG_TYPE": "file",
            "CONFIG_FILE_PATH": CASBIN_MODEL,
            "CONFIG_TEXT": "",
        },
        # Casbin adapter.
        "ADAPTER": {
            "NAME": "casbin_adapter.adapter.Adapter",
        },
        "LOG": {
            # Changes whether Dauthz will log messages to the Logger.
            "ENABLED": False,
        },
    },
}

4. Add RBAC model to database(in /user_management/apps.py)

p_rules = [
        ["anonymous", "/", "(GET)|(POST)"],
        ["anonymous", "/login", "(GET)|(POST)"],
        ["anonymous", "/register", "(GET)|(POST)"],
        ["normal_user", "/logout", "(GET)|(POST)"],
        ["admin", "/all_users_profile", "(GET)|(POST)"],
    ]
g_rules = [
    ["normal_user", "anonymous"],
    ["admin", "normal_user"]
]
enforcer.add_policies(p_rules)
enforcer.add_grouping_policies(g_rules)
enforcer.save_policy()

Model of Example :

5. Completed.

License

This project is licensed under the Apache 2.0 license.

django-authorization-example's Issues

TypeError: 'NoneType' object is not subscriptable

After running cmd python manage.py runserver , there is an exception:

Watching for file changes with StatReloader
Exception in thread django-main-thread:
File "D:\django-authorization-example\user_management\apps.py", line 31, in ready
load_policy()
File "D:\django-authorization-example\user_management\apps.py", line 21, in load_policy
enforcer.add_grouping_policies(g_rules)
TypeError: 'NoneType' object is not subscriptable

How could I solve this problem, I do need your help. Thanks a lot.

How casbin works for authentication? I didn't find func enforce()

I think casbin confirm user permissions using code such as e.enforcer(request).
But I didn't find any code about casbin in ./user_manangement/views.py L37-L58 . The code does check user's name and password, and I think this code didn't use casbin to check request for authentication.
Also, only admin can visit 'all_users_profile', but I can't find any code about casbin's function enforcer.
I'm curious how it works in this project. Thanks a lot!