Ask HN: How do you implement authorization in Django?

You will most likely need to build something yourself. Django's authorization is limited in this aspect :(

I think we need more info about your project and how you want authZ to work. Do you need groups? Can everyone share with anyone? Do you want to support customer defined policies, or should the service define static roles?

Oso, AuthZed, and Ory Keto come to mind, but those may be too heavyweight if you just need something basic.

https://github.com/pycasbin/django-casbin

The Casbin team has built a SaaS called Casdoor to provide Casbin + Django authorizations service: https://www.casdoor.com/