Implementing role-based access control (RBAC) in Flask

[Stephie Glaser]

Many frameworks and libraries provide plug-ins for common authorization
patterns like roles, but either don't provide enough of a model to be
helpful or are so rigid that you need to migrate away from them down the
line.

We just released a library that provides a configuration-based approach to
adding role-based access control (RBAC) to your application. The new Oso
Roles library, with support for Python + Flask, speeds up the time it takes
to build fine-grained permissions using roles and related patterns. The
library includes:

- Role configuration
- Data management
- Enforcement
- End-user configuration
- Last-mile customizations

The library is in early access. Here are relevant links:


- Documentation showing how to how to use the library to add roles to a
Flask app with GitClub, our best practice example app:
<http://docs.osohq.com/python/guides/new-roles.html>
http://docs.osohq.com/python/guides/new-roles.html
- GitClub source code:
<https://github.com/osohq/gitclub-sqlalchemy-flask-react>
https://github.com/osohq/gitclub-sqlalchemy-flask-react

Stephie Glaser
Developer Relations, Oso <https://www.osohq.com/>