drf-iam 0.0.1.post0__py3-none-any.whl

drf_iam/admin.py

@@ -0,0 +1,29 @@
+from django.contrib import admin
+
+from drf_iam.models import Policy, Role, RolePolicy
+
+
+@admin.register(Policy)
+class PolicyAdmin(admin.ModelAdmin):
+    list_display = ('action', 'resource_type', 'description')
+    search_fields = ('action', 'resource_type')
+    list_filter = ('action', 'resource_type')
+
+class PoliciesInline(admin.TabularInline):
+    model = Role.policies.through
+
+@admin.register(Role)
+class RoleAdmin(admin.ModelAdmin):
+    list_display = ('name', 'description')
+    search_fields = ('name', 'description')
+    list_filter = ('name', 'description')
+    inlines = [PoliciesInline]
+
+
+@admin.register(RolePolicy)
+class RolePolicyAdmin(admin.ModelAdmin):
+    list_display = ('role', 'policy')
+    search_fields = ('role', 'policy')
+    list_filter = ('role', 'policy')
+
+

drf_iam/apps.py

@@ -0,0 +1,19 @@
+import logging
+
+from django.apps import AppConfig
+from django.db.models.signals import post_migrate
+
+logger = logging.getLogger(__name__)
+
+class DrfIamConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "drf_iam"
+
+    def ready(self):
+        if not hasattr(self, 'already_loaded'):
+            from drf_iam.utils.load_viewset_permissions import load_permissions_from_urls
+            post_migrate.connect(
+                load_permissions_from_urls,
+                dispatch_uid="drf_iam.utils.load_permissions_from_urls",
+            )
+            self.already_loaded = True

drf_iam/migrations/0001_initial.py

@@ -0,0 +1,97 @@
+# Generated by Django 5.2 on 2025-04-19 11:30
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = []
+
+    operations = [
+        migrations.CreateModel(
+            name="Role",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                ("name", models.CharField(max_length=100, unique=True)),
+                ("description", models.TextField(blank=True)),
+            ],
+        ),
+        migrations.CreateModel(
+            name="Policy",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                ("action", models.CharField(max_length=100)),
+                ("resource_type", models.CharField(max_length=100)),
+                ("description", models.TextField(blank=True)),
+            ],
+            options={
+                "verbose_name": "policy",
+                "verbose_name_plural": "policies",
+                "ordering": ["action", "resource_type"],
+                "unique_together": {("action", "resource_type")},
+            },
+        ),
+        migrations.CreateModel(
+            name="RolePolicy",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                (
+                    "policy",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE, to="drf_iam.policy"
+                    ),
+                ),
+                (
+                    "role",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE, to="drf_iam.role"
+                    ),
+                ),
+            ],
+            options={
+                "verbose_name": "role policy",
+                "verbose_name_plural": "role policies",
+                "ordering": ["role", "policy"],
+                "unique_together": {("role", "policy")},
+            },
+        ),
+        migrations.AddField(
+            model_name="role",
+            name="policies",
+            field=models.ManyToManyField(
+                blank=True,
+                db_index=True,
+                related_name="policies",
+                related_query_name="policies",
+                through="drf_iam.RolePolicy",
+                to="drf_iam.policy",
+            ),
+        ),
+    ]

drf_iam/models.py

@@ -0,0 +1,40 @@
+from django.db import models
+
+
+class Role(models.Model):
+    name = models.CharField(max_length=100, unique=True)
+    description = models.TextField(blank=True)
+    policies = models.ManyToManyField('Policy', through='RolePolicy', blank=True, related_name='policies',
+                                      related_query_name='policies', db_index=True)
+
+    def __str__(self):
+        return self.name
+
+
+class Policy(models.Model):
+    action = models.CharField(max_length=100)
+    resource_type = models.CharField(max_length=100)
+    description = models.TextField(blank=True)
+
+    def __str__(self):
+        return f"{self.action} on {self.resource_type}"
+
+    class Meta:
+        unique_together = ('action', 'resource_type')
+        ordering = ['action', 'resource_type']
+        verbose_name_plural = 'policies'
+        verbose_name = 'policy'
+
+
+class RolePolicy(models.Model):
+    role = models.ForeignKey(Role, on_delete=models.CASCADE, db_index=True)
+    policy = models.ForeignKey(Policy, on_delete=models.CASCADE, db_index=True)
+
+    class Meta:
+        unique_together = ('role', 'policy')
+        ordering = ['role', 'policy']
+        verbose_name_plural = 'role policies'
+        verbose_name = 'role policy'
+
+    def __str__(self):
+        return f"{self.role.name} - {self.policy}"

drf_iam/permissions.py

@@ -0,0 +1,24 @@
+from rest_framework import permissions
+
+class DRFIamPermission(permissions.IsAuthenticated):
+    def has_permission(self, request, view):
+        user = request.user
+        role = getattr(user, 'role', None)
+        if not role:
+            return False
+        if not hasattr(user, '_cached_policy_actions'):
+            user._cached_policy_actions = set(
+                role.policies.values_list('action', flat=True)
+            )
+        policy_actions = user._cached_policy_actions
+        # Resolve view name
+        view_name = getattr(view, 'iam_policy_name', None)
+        if not view_name:
+            view_class_name = view.__class__.__name__.lower()
+            view_name = view_class_name.replace('viewset', '')
+
+        # Resolve action (DRF view.action or fallback to HTTP method)
+        action = getattr(view, 'action', request.method.lower())
+        policy_action = f"{view_name}:{action}"
+
+        return policy_action in policy_actions

drf_iam/tests.py

@@ -0,0 +1,3 @@
+from django.test import TestCase
+
+# Create your tests here.

drf_iam-0.0.1.post0.dist-info/METADATA

@@ -0,0 +1,35 @@
+Metadata-Version: 2.2
+Name: drf-iam
+Version: 0.0.1.post0
+Summary: IAM-style roles and permissions for Django Rest Framework
+Home-page: https://github.com/tushar1328/drf-iam.git
+Author: Tushar Patel
+Author-email: tushar.patel@gmail.com
+Classifier: Framework :: Django
+Classifier: Framework :: Django :: 3.2
+Classifier: Programming Language :: Python :: 3
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.6
+Description-Content-Type: text/markdown
+Requires-Dist: Django>=3.2
+Requires-Dist: djangorestframework>=3.12
+Dynamic: author
+Dynamic: author-email
+Dynamic: classifier
+Dynamic: description
+Dynamic: description-content-type
+Dynamic: home-page
+Dynamic: requires-dist
+Dynamic: requires-python
+Dynamic: summary
+
+## Rest Framework IAM
+
+A simple Django application for Role Based Access Control (RBAC) using Django Rest Framework
+
+## Installation
+
+```bash
+pip install drf-iam
+```

drf_iam-0.0.1.post0.dist-info/RECORD

@@ -0,0 +1,12 @@
+drf_iam/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+drf_iam/admin.py,sha256=xH4T6xGKuylRCTwqLPJAx3Eb07Mb0Qb43iYAWX_cSN8,788
+drf_iam/apps.py,sha256=HUJatT0Wf-6ft19lWNkSqI7fnsnAjoLKQrjPUnVAcn8,611
+drf_iam/models.py,sha256=3K0f0SKWiiMFKbiLQ_SKrwV-B5jzzm-HH2gO8nOGs54,1296
+drf_iam/permissions.py,sha256=kUhB7V48sb4v3uZI2lWv40hvI85nE61rL-amh6OY8mg,958
+drf_iam/tests.py,sha256=mrbGGRNg5jwbTJtWWa7zSKdDyeB4vmgZCRc2nk6VY-g,60
+drf_iam/migrations/0001_initial.py,sha256=y_4jXnr7gjU4UXxVrgVrStTSFu3h1ZrmjEZDL4FtZa4,3086
+drf_iam/migrations/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+drf_iam-0.0.1.post0.dist-info/METADATA,sha256=LXFRG58OZ96UenArozVYTCdrxlBqA34vNLGVCiWEB8k,947
+drf_iam-0.0.1.post0.dist-info/WHEEL,sha256=In9FTNxeP60KnTkGw7wk6mJPYd_dQSjEZmXdBdMCI-8,91
+drf_iam-0.0.1.post0.dist-info/top_level.txt,sha256=daz6AaQ9e_cfCjLk2aRoLb_PCOoFofYUX4DU85VwHSM,8
+drf_iam-0.0.1.post0.dist-info/RECORD,,

drf_iam-0.0.1.post0.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (75.8.0)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

drf_iam-0.0.1.post0.dist-info/top_level.txt

@@ -0,0 +1 @@
+drf_iam