Invenio-Access

Role-based access control (RBAC) for Invenio.

Invenio-Access works together with Invenio-Accounts to provide a full-fledge authentication and authorization system for Flask and Invenio based on a suite of existing Flask extensions such as:

• Flask-Security
• Flask-Login
• Flask-Principal
• passlib

Features:

• Role-based access control with object level permissions.
• CLI and administration interface for allowing/denying actions to users, roles or system roles.
• Support for superuser privileges.

Further documentation is available on https://invenio-access.readthedocs.io/

User’s Guide

This part of the documentation will show you how to get started in using Invenio-Access.

• Overview
  • Users & roles
  • Permissions and needs
  • Types of needs
  • Actions
  • Protecting resources
  • Granting access
  • Identity
• Installation
• Configuration
• Usage
  • Initialization
  • Protecting resources
  • Granting access
  • Action parameters
  • Denying access
  • Protecting views
  • Superuser
  • System roles
  • Registering actions
  • Listing actions

API Reference

If you are looking for information on a specific function, class or method, this part of the documentation is for you.

• API Docs
  • Action factory
  • Permissions
  • Needs
  • System roles
  • Actions
  • Models
  • Utils
  • Proxies
  • CLI

Additional Notes

Notes on how to contribute, legal information and changes are here for the interested.

• Contributing
• Changes
• License
• Contributors