lukaszb/django-guardian — Issue #59: Attribute-based access control
Author: filipefigcorreia
Created: 2011-12-27 15:09:16+00:00
State: open

This is an enhancement suggestion.

Guardian supports object based permissions, which allows a finer-grained control compared to what django does out-of-the-box.

What I'd like to suggest is to support [Attribute-based access control](http://en.wikipedia.org/wiki/Access_control#Attribute-based_access_control). Instead of assigning permissions to specific objects we could assign them using wildcards

For example, instead of saying:
"**User 1** has **read** access to object **a-42**" of the model **MyClassA**
"**User 1** has **read** access to object **a-43**" of the model **MyClassA**
...

We could instead say:
"**User 1** has **read** access to objects of the model **MyClassA** that match the condition **first_name = 'Jhon'**
...

I.e., let "User 1" read all objects with a "first_name" attribute with the value "Jhon".