Graphene-django: How to handle permissions per Object

[sgaseretto]

Is there a way to do this like what django-guardian does or DRF with his DjangoModelPermissions?

[annshress]

It has been discussed previously
https://github.com/graphql-python/graphene-django/issues/79

I have done following as my way to handle permissions currently
https://medium.com/@anish.shrestha/relay-graphene-django-and-permissions-b1b2b96daf20

[hz-equityzen]

@annshress how about queries? This only addresses mutation

[annshress]

@hz-equityzen I have not felt the need to handle permissions in queries.

Edit: Okay considering many people need query related permission. You will need to write your own resolver for that.

For example.

def resolve_object(root, info, **kwargs):
    if info.context.user.is_authenticated():
        do something
    else:
        do something else

[sgaseretto]

Actually, In the project I'm working on I need to handle permissions in queries

[taoufik07]

You can check this out https://github.com/taoufik07/django-graphene-permissions

[dopeboy]

I'd refer to the previous body of discussion here. Additionally, should you use django-graphql-jwt, it comes with a built in permissions handler done using decorators.

[HaukLee]

check this out https://github.com/0soft/graphene-django-plus

[sgaseretto]

This is exactly what I was looking for, thanks a lot!