Notes/docs/Guides/Django REST Framework/8 - Role-Based Access Control (RBAC) (Work in progress).md

9 lines
457 B
Markdown
Raw Normal View History

(Work in progress)
### Role-Based Access Control (RBAC)
There will be instances where you will need to restrict what is returned to the user.
- A student may want to see only the subjects they're currently enrolled in.
- An author would not want to edit a book they don't own
- A bank clerk shouldn't be able to delete bank transactions
These restrictions and rules all fall under the concept of Role-Based Access Control or RBAC. Whether you're using...