This message was deleted.

Hi @Liam Taylor, I'm an AI assistant for Permit.io. I'll analyze available sources and get back to you shortly.

my understanding of how i might got about this is as follows. this is based on using the PDP/Python SDK • in a view, extract the data to be filtered from the database • serialize it (or a subset of the data) • call

Permit.filter_objects

with this data and the rest of the required stuff, which return the filtered data set • (if the data sent to permit is a subset of the data the full data set based on the

filter_objects

response

Hey! Great to hear you're exploring Permit.io for ReBAC data filtering in your Django project! I'm ready to help with your implementation questions. Permit.io supports data filtering through multiple approaches including PDP-Level Filtering and filtering based on the Information Graph (1) . For Django specifically, you can implement ReBAC (Relationship-Based Access Control) which extends beyond basic RBAC by considering relationships between identities and resources (2) . To get started with Django and Permit.io, you'll need to: 1. Initialize the Permit client in your Django project :

from permit import Permit
from dotenv import load_dotenv
import os

load_dotenv()

permit = Permit(
    pdp=os.getenv("PERMIT_PDP_URL") ,
    token=os.getenv("PERMIT_SDK_KEY")
)

2. For ReBAC implementation, you'll need to run a local PDP container :

docker pull permitio/pdp-v2:latest
docker run -it -p 7766:7000 \
    --env PDP_DEBUG=True \
    --env PDP_API_KEY=<YOUR_API_KEY> \
    permitio/pdp-v2:latest

The data filtering capabilities include methods like

filterObjects

for PDP-level filtering and functions like

getUserPermissions

and

getAuthorizedUsers

for filtering based on the information graph (1) . Feel free to share your specific questions in the thread - I'm here to help with the implementation details!

under the hood, my understanding is that permit • makes an external API call to get relevant permissions • filters the data in python code based on those permissions

To learn more, see the sources I considered: [[1] Data Filtering](https://docs.permit.io/how-to/enforce-permissions/data-filtering) [[2] Django Authorization: An Implementation Guide](https://www.permit.io/blog/django-authorization-an-implementation-guide)