Group-based permissions in Django - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the purpose of groups in Django's permission system?

Groups in Django help organize users by roles. They let you assign permissions to many users at once, making management easier.

beginner

How do you assign a permission to a group in Django?

You get the group object, then add permission objects to its permissions attribute using group.permissions.add(permission).

intermediate

What happens when a user belongs to multiple groups with different permissions?

The user gets all permissions from all groups combined. Permissions accumulate across groups.

beginner

How can you check if a user has a specific permission in Django?

Use user.has_perm('app_label.permission_codename'). It checks both user and group permissions.

beginner

Why use groups instead of assigning permissions directly to users?

Groups simplify permission management by letting you change permissions for many users at once instead of individually.

In Django, what does adding a user to a group do?

A Deletes the user's existing permissions

B Gives the user all permissions assigned to that group

C Automatically makes the user a superuser

D Removes the user from other groups

Adding a user to a group grants the user all permissions assigned to that group.

Which method checks if a user has a specific permission in Django?

A user.permission_exists('permission')

B user.check_permission('permission')

C group.has_permission('permission')

D user.has_perm('app_label.permission_codename')

The correct method is user.has_perm('app_label.permission_codename').

How do you add a permission to a group in Django?

A group.add_permission(permission)

B user.permissions.add(permission)

C group.permissions.add(permission)

D permission.assign_to(group)

You add a permission to a group using group.permissions.add(permission).

If a user belongs to two groups with different permissions, what permissions does the user have?

A All permissions from both groups combined

B Only permissions from the second group

C No permissions at all

D Only permissions from the first group

The user has all permissions from both groups combined.

Why is it better to use groups for permissions instead of assigning permissions directly to users?

A Groups allow easier management of permissions for many users

B Groups automatically make users superusers

C Groups remove all user permissions

D Groups prevent users from logging in

Groups let you manage permissions for many users easily by assigning permissions once to the group.

Explain how group-based permissions work in Django and why they are useful.

Think about how you manage access for many users at once.

Describe the steps to assign a permission to a group and then give that permission to a user through the group.

Focus on the order of actions with groups, permissions, and users.

Practice

1. What is the main purpose of using groups in Django permissions?

easy

A. To create new database tables automatically

B. To speed up the Django server

C. To assign permissions to multiple users at once

D. To change the user password policy

Solution

1. Step 1: Understand the role of groups in Django

   Groups are used to organize users and assign permissions collectively.

2. Step 2: Identify the main benefit

   Assigning permissions to groups lets you manage many users easily without setting permissions individually.

3. Final Answer:

   To assign permissions to multiple users at once -> Option C

4. Quick Check:

   Groups simplify permission management = B [OK]

Hint: Groups bundle permissions for many users quickly [OK]

Common Mistakes:

• Thinking groups create database tables
• Believing groups affect server speed
• Confusing groups with password policies

2. Which of the following is the correct way to check if a user has a permission in Django?

easy

A. user.can('app_label.codename')

B. user.check_permission('app_label.codename')

C. user.permission('app_label.codename')

D. user.has_perm('app_label.codename')

Solution

1. Step 1: Recall Django's permission check method

   The correct method to check permissions is has_perm on the user object.

2. Step 2: Match the method name exactly

   Only user.has_perm('app_label.codename') is valid syntax.

3. Final Answer:

   user.has_perm('app_label.codename') -> Option D

4. Quick Check:

   Permission check method = has_perm [OK]

Hint: Use user.has_perm() to check permissions [OK]

Common Mistakes:

• Using incorrect method names like check_permission
• Confusing method names with permission attributes
• Missing the app_label.codename format

3. Given the following code, what will print(user.has_perm('blog.add_post')) output if the user belongs to a group with the 'add_post' permission?

from django.contrib.auth.models import User, Group, Permission
user = User.objects.create(username='alice')
group = Group.objects.create(name='Editors')
permission = Permission.objects.get(codename='add_post')
group.permissions.add(permission)
user.groups.add(group)

medium

A. False

B. True

C. Raises AttributeError

D. None

Solution

1. Step 1: Understand group permission assignment

   The group 'Editors' has the 'add_post' permission added, and the user is added to this group.

2. Step 2: Check if user inherits group permissions

   Users automatically get permissions from their groups, so user.has_perm('blog.add_post') returns True.

3. Final Answer:

   True -> Option B

4. Quick Check:

   User in group with permission = True [OK]

Hint: User inherits group permissions automatically [OK]

Common Mistakes:

• Assuming user permissions must be assigned directly
• Expecting False because user has no direct permission
• Thinking code raises error due to missing user.save()

4. Identify the error in this code snippet that tries to add a user to a group and assign a permission:

user = User.objects.get(username='bob')
group = Group.objects.get(name='Authors')
permission = Permission.objects.get(codename='change_article')
group.permissions.add(permission)
user.groups.add(group)
print(user.has_perm('app.change_article'))

medium

A. The app label in has_perm is wrong

B. Group permissions cannot be added this way

C. User must be saved after adding group

D. The permission codename is incorrect

Solution

1. Step 1: Check the permission codename and app label

   The permission codename is 'change_article', but the app label used in has_perm is 'app', which is likely incorrect.

2. Step 2: Confirm correct app label usage

   The has_perm method requires the correct app label prefix matching the permission's app.

3. Final Answer:

   The app label in has_perm is wrong -> Option A

4. Quick Check:

   App label must match permission = D [OK]

Hint: Match app label exactly in has_perm string [OK]

Common Mistakes:

• Thinking user needs save() after group add
• Believing group.permissions.add() is invalid
• Assuming codename is always 'change_article' without app context

5. You want to create a group 'Moderators' that can both add and delete comments in your Django app 'forum'. Which of the following code snippets correctly assigns these permissions to the group and adds a user to it?

hard

A. group = Group.objects.create(name='Moderators')
add_perm = Permission.objects.get(codename='add_comment')
del_perm = Permission.objects.get(codename='delete_comment')
group.permissions.add(add_perm, del_perm)
user.groups.add(group)

B. group = Group.objects.create(name='Moderators')
add_perm = Permission.objects.get(codename='forum.add_comment')
del_perm = Permission.objects.get(codename='forum.delete_comment')
group.permissions.add(add_perm, del_perm)
user.groups.add(group)

C. group = Group.objects.create(name='Moderators')
add_perm = Permission.objects.get(codename='add_comment')
del_perm = Permission.objects.get(codename='delete_comment')
group.permissions.set([add_perm])
user.groups.add(group)

D. group = Group.objects.create(name='Moderators')
add_perm = Permission.objects.get(codename='add_comment')
del_perm = Permission.objects.get(codename='delete_comment')
group.permissions.set(add_perm, del_perm)
user.groups.add(group)

Solution

1. Step 1: Identify correct permission codenames and usage

   Permission codenames do not include app label prefix in get(codename=...). The app label is used only in has_perm checks.

2. Step 2: Check correct method to add multiple permissions

   group.permissions.add() accepts multiple Permission objects; set() expects an iterable, not separate arguments.

3. Step 3: Verify user group addition

   user.groups.add(group) correctly adds the user to the group.

4. Final Answer:

   uses correct codenames and permissions.add() for multiple permissions -> Option A

5. Quick Check:

   Use codename only and add() for multiple permissions = C [OK]

Hint: Use codename only and add() for multiple permissions [OK]

Common Mistakes:

• Including app label in Permission.objects.get(codename=...)
• Using set() with multiple arguments instead of a list
• Confusing add() and set() method usage