A Django package that provides PostgreSQL Row Level Security (RLS) capabilities at the database level.
See CONTRIBUTING.md.
See SECURITY.md.
- 🔒 Database-level Row Level Security using PostgreSQL RLS
- 🏢 Tenant-based and user-based policies
- 🐍 Pythonic Policies: Define policies using standard Django
Qobjects - 🌳 Hierarchical RLS: Support for recursive CTEs and nested organizations
- ⚡ Context Processors: Inject dynamic context variables (e.g. user IP, session data)
- 🔧 Django 5.0, 5.1, 5.2 (LTS), and 6.0 support
- 🧪 Comprehensive test coverage
- 📖 Extensible policy system
- ⚡ Performance optimized
from django.db import models
from django.db.models import Q
from django_rls.models import RLSModel
from django_rls.policies import ModelPolicy, RLS
class Project(RLSModel):
name = models.CharField(max_length=100)
owner = models.ForeignKey(User, on_delete=models.CASCADE)
is_public = models.BooleanField(default=False)
class Meta:
rls_policies = [
# Pythonic Policy: Owner OR Public
ModelPolicy(
'access_policy',
filters=Q(owner=RLS.user_id()) | Q(is_public=True)
),
]Install from PyPI:
pip install django-rlsOr install the latest development version:
pip install git+https://github.com/kdpisda/django-rls.git- Python 3.10, 3.11, 3.12, or 3.13
- Django 5.0, 5.1, 5.2 (LTS), or 6.0
- PostgreSQL 12 or higher (tested with PostgreSQL 17)
Add to your Django settings:
INSTALLED_APPS = [
# ... your apps
'django_rls',
]
MIDDLEWARE = [
# ... your middleware
'django_rls.middleware.RLSContextMiddleware',
]Full documentation is available at django-rls.com
BSD 3-Clause License - see LICENSE file for details.