Django Access Review

IDOR and tenant isolation in Django

Sentry · Apache-2.0

When

Django access control and IDOR security review. Use when reviewing Django views, DRF viewsets, ORM queries, or any Python/Django code handling user authorization. Trigger keywords: "IDOR", "access control", "authorization", "Django permissions", "object permissions", "tenant isolation", "broken access".

The Catch

IDOR and tenant isolation in Django views/ORM. Idle off Django; not a generic auth review.

Embed

[![Reviewed on Stack Gems](https://stackgems.com/badge/skill/django-access-review.svg)](https://stackgems.com/skills/django-access-review)