Many frameworks and libraries provide plug-ins for common authorization patterns like roles, but either don't provide enough of a model to be helpful or are so rigid that you need to migrate away from them down the line.
We just released a library that provides a configuration-based approach to adding role-based access control (RBAC) to your application. The new Oso Roles library, with support for Python + Flask, speeds up the time it takes to build fine-grained permissions using roles and related patterns. The library includes: - Role configuration - Data management - Enforcement - End-user configuration - Last-mile customizations The library is in early access. Here are relevant links: - Documentation showing how to how to use the library to add roles to a Flask app with GitClub, our best practice example app: <http://docs.osohq.com/python/guides/new-roles.html> http://docs.osohq.com/python/guides/new-roles.html - GitClub source code: <https://github.com/osohq/gitclub-sqlalchemy-flask-react> https://github.com/osohq/gitclub-sqlalchemy-flask-react Stephie Glaser Developer Relations, Oso <https://www.osohq.com/> -- https://mail.python.org/mailman/listinfo/python-list