#30781: New feature: field permissions based on data classification
-------------------------------------+-------------------------------------
Reporter: Tankske | Owner: nobody
Type: New | Status: new
feature |
Component: | Version:
Uncategorized | Keywords: Field permission
Severity: Normal | data classification
Triage Stage: | Has patch: 0
Unreviewed |
Needs documentation: 0 | Needs tests: 0
Patch needs improvement: 0 | Easy pickings: 0
UI/UX: 0 |
-------------------------------------+-------------------------------------
### Is your feature request related to a problem? Please describe.
I would like to classify entity properties according to a specific
perspective and the manage access to them via permissions based on these
classifications.
EG. I would like to add a GDPR perspective classification (PII or non-
PII). Then I would like to specify to certain users, roles or permissions
if they are allowed to see PII and/or non-PII data. Another classification
is confidentiality (public data, internal data, condifential and or
strictly confidential)
### Describe the solution you'd like
It would be great to have an annotation such as @classify that works in a
similar was as @authorize.
### Additional context
In my opinion, there are 3 levels of security being action (crud-
operation), object level and field-property level. This last one is still
missing. Views are an option, but it isn't fundamentalky about security,
views are about representing behaviour and how you expose data. Not about
if you are allowed to expose data.
Looking forward on feedback about this!
--
Ticket URL: <https://code.djangoproject.com/ticket/30781>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/050.776c1943e237523abdf1634c0afdff19%40djangoproject.com.
