I glanced at these tools and felt security will "fall through the cracks" with some teams I knew, thanks to the parade of developers and features that need to be done yesterday. Django seems more forgiving of neglect. I can do `TopSecretDocument.fetch_or_show_404_page(office__department__=me)` (Github defaults to 404 for non-200 errors) or `@user_is(function_that_checks_user_is_senior_staff)def list_patients(request)` and then write happy path code. And its easy to unit test too.

https://docs.djangoproject.com/en/6.0/topics/auth/default/#d... https://docs.djangoproject.com/en/5.2/topics/http/shortcuts/... https://docs.djangoproject.com/en/5.2/topics/http/shortcuts/...

> In this article, you will learn top 6 open source authorization libraries ant <-- their key factors that you should consider when choosing an authorization library.

Typo on first sentence.

I would like to put in an honourable mention for Open Policy Agent: https://github.com/open-policy-agent/opa

I use casdoor with casbin, very happy with it