Group-based permissions in Django - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to import the Group model from Django's auth module.

Django

from django.contrib.auth.models import [1]

Drag options to blanks, or click blank then click option'

AUser

BPermission

CGroup

DAdmin

Attempts:

3 left

💡 Hint

Common Mistakes

Importing User instead of Group

Using incorrect module for Group

Misspelling the model name

The Group model is imported from django.contrib.auth.models to manage group-based permissions.

2fill in blank

medium

Complete the code to create a new group named 'Editors'.

Django

new_group = Group.objects.[1](name='Editors')

Drag options to blanks, or click blank then click option'

Acreate

Bget

Cfilter

Dall

Attempts:

3 left

💡 Hint

Common Mistakes

Using filter which returns a queryset

Using get which retrieves existing objects

Using all which returns all objects

The create method creates and saves a new group with the given name.

3fill in blank

hard

Fix the error in the code to add a user to a group.

Django

user.groups.[1](group)

Drag options to blanks, or click blank then click option'

Aremove

Badd

Cinsert

Dappend

Attempts:

3 left

💡 Hint

Common Mistakes

Using append which is not a Django queryset method

Using remove which deletes a relation

Using insert which is not valid here

The add method is used to add a group to the user's groups many-to-many relation.

4fill in blank

hard

Fill both blanks to check if a user belongs to the 'Admins' group.

Django

if user.groups.filter(name=[1]).[2]():
    print('User is an admin')

Drag options to blanks, or click blank then click option'

A'Admins'

Bexists

Ccount

D'Editors'

Attempts:

3 left

💡 Hint

Common Mistakes

Using count() which returns a number instead of a boolean

Using wrong group name string

Omitting quotes around the group name

The filter method filters groups by name, and exists() checks if any such group exists for the user.

5fill in blank

hard

Fill all three blanks to assign the 'change_article' permission to the 'Editors' group.

Django

permission = Permission.objects.get(codename=[1])
group = Group.objects.get(name=[2])
group.permissions.[3](permission)

Drag options to blanks, or click blank then click option'

A'change_article'

B'Editors'

Cadd

Dremove

Attempts:

3 left

💡 Hint

Common Mistakes

Using wrong codename string

Using wrong group name string

Using remove instead of add

We get the permission by its codename, get the group by name, then add the permission to the group's permissions.

Practice

1. What is the main purpose of using groups in Django permissions?

easy

A. To create new database tables automatically

B. To speed up the Django server

C. To assign permissions to multiple users at once

D. To change the user password policy

Solution

1. Step 1: Understand the role of groups in Django

   Groups are used to organize users and assign permissions collectively.

2. Step 2: Identify the main benefit

   Assigning permissions to groups lets you manage many users easily without setting permissions individually.

3. Final Answer:

   To assign permissions to multiple users at once -> Option C

4. Quick Check:

   Groups simplify permission management = B [OK]

Hint: Groups bundle permissions for many users quickly [OK]

Common Mistakes:

• Thinking groups create database tables
• Believing groups affect server speed
• Confusing groups with password policies

2. Which of the following is the correct way to check if a user has a permission in Django?

easy

A. user.can('app_label.codename')

B. user.check_permission('app_label.codename')

C. user.permission('app_label.codename')

D. user.has_perm('app_label.codename')

Solution

1. Step 1: Recall Django's permission check method

   The correct method to check permissions is has_perm on the user object.

2. Step 2: Match the method name exactly

   Only user.has_perm('app_label.codename') is valid syntax.

3. Final Answer:

   user.has_perm('app_label.codename') -> Option D

4. Quick Check:

   Permission check method = has_perm [OK]

Hint: Use user.has_perm() to check permissions [OK]

Common Mistakes:

• Using incorrect method names like check_permission
• Confusing method names with permission attributes
• Missing the app_label.codename format

3. Given the following code, what will print(user.has_perm('blog.add_post')) output if the user belongs to a group with the 'add_post' permission?

from django.contrib.auth.models import User, Group, Permission
user = User.objects.create(username='alice')
group = Group.objects.create(name='Editors')
permission = Permission.objects.get(codename='add_post')
group.permissions.add(permission)
user.groups.add(group)

medium

A. False

B. True

C. Raises AttributeError

D. None

Solution

1. Step 1: Understand group permission assignment

   The group 'Editors' has the 'add_post' permission added, and the user is added to this group.

2. Step 2: Check if user inherits group permissions

   Users automatically get permissions from their groups, so user.has_perm('blog.add_post') returns True.

3. Final Answer:

   True -> Option B

4. Quick Check:

   User in group with permission = True [OK]

Hint: User inherits group permissions automatically [OK]

Common Mistakes:

• Assuming user permissions must be assigned directly
• Expecting False because user has no direct permission
• Thinking code raises error due to missing user.save()

4. Identify the error in this code snippet that tries to add a user to a group and assign a permission:

user = User.objects.get(username='bob')
group = Group.objects.get(name='Authors')
permission = Permission.objects.get(codename='change_article')
group.permissions.add(permission)
user.groups.add(group)
print(user.has_perm('app.change_article'))

medium

A. The app label in has_perm is wrong

B. Group permissions cannot be added this way

C. User must be saved after adding group

D. The permission codename is incorrect

Solution

1. Step 1: Check the permission codename and app label

   The permission codename is 'change_article', but the app label used in has_perm is 'app', which is likely incorrect.

2. Step 2: Confirm correct app label usage

   The has_perm method requires the correct app label prefix matching the permission's app.

3. Final Answer:

   The app label in has_perm is wrong -> Option A

4. Quick Check:

   App label must match permission = D [OK]

Hint: Match app label exactly in has_perm string [OK]

Common Mistakes:

• Thinking user needs save() after group add
• Believing group.permissions.add() is invalid
• Assuming codename is always 'change_article' without app context

5. You want to create a group 'Moderators' that can both add and delete comments in your Django app 'forum'. Which of the following code snippets correctly assigns these permissions to the group and adds a user to it?

hard

A. group = Group.objects.create(name='Moderators')
add_perm = Permission.objects.get(codename='add_comment')
del_perm = Permission.objects.get(codename='delete_comment')
group.permissions.add(add_perm, del_perm)
user.groups.add(group)

B. group = Group.objects.create(name='Moderators')
add_perm = Permission.objects.get(codename='forum.add_comment')
del_perm = Permission.objects.get(codename='forum.delete_comment')
group.permissions.add(add_perm, del_perm)
user.groups.add(group)

C. group = Group.objects.create(name='Moderators')
add_perm = Permission.objects.get(codename='add_comment')
del_perm = Permission.objects.get(codename='delete_comment')
group.permissions.set([add_perm])
user.groups.add(group)

D. group = Group.objects.create(name='Moderators')
add_perm = Permission.objects.get(codename='add_comment')
del_perm = Permission.objects.get(codename='delete_comment')
group.permissions.set(add_perm, del_perm)
user.groups.add(group)

Solution

1. Step 1: Identify correct permission codenames and usage

   Permission codenames do not include app label prefix in get(codename=...). The app label is used only in has_perm checks.

2. Step 2: Check correct method to add multiple permissions

   group.permissions.add() accepts multiple Permission objects; set() expects an iterable, not separate arguments.

3. Step 3: Verify user group addition

   user.groups.add(group) correctly adds the user to the group.

4. Final Answer:

   uses correct codenames and permissions.add() for multiple permissions -> Option A

5. Quick Check:

   Use codename only and add() for multiple permissions = C [OK]

Hint: Use codename only and add() for multiple permissions [OK]

Common Mistakes:

• Including app label in Permission.objects.get(codename=...)
• Using set() with multiple arguments instead of a list
• Confusing add() and set() method usage