# Django Access Review

> IDOR and tenant isolation in Django

**Subcategory:** Sentry  
**License:** Apache-2.0  
**Source:** https://github.com/getsentry/skills/blob/main/skills/django-access-review/SKILL.md

---

## When it is useful

Django access control and IDOR security review. Use when reviewing Django views, DRF viewsets, ORM queries, or any Python/Django code handling user authorization. Trigger keywords: "IDOR", "access control", "authorization", "Django permissions", "object permissions", "tenant isolation", "broken access".

## The Catch

IDOR and tenant isolation in Django views/ORM. Idle off Django; not a generic auth review.