SkillLow riskUnclaimed

Django Access Control & IDOR Review

Django access control and IDOR security review. Use when reviewing Django views, DRF viewsets, ORM queries, or any Python/Django code handling user authorization. Trigger keywords: "IDOR", "access control", "authorization", "Django permissions", "object permissions", "tenant isolation", "broken access".

getsentrygetsentry/django-access-review★ 1kUpdated Sep 29, 2026

Description

Its license does not let Harness keep a copy, so its description is read at the source.getsentry/skills ↗

Permissions

DeclaredDetected
Runs code—None
Installs—None
Runs install scripts—None
Network—cheatsheetseries.owasp.org
Needs credentials—None
Outside the workspace—None
Agent toolsReadGrepGlobBashTaskReadGrepGlobBashTask

Checks

Low risk · Nothing worth a warning was found.

Not reviewed by a person · Checked by rules; the model review is not switched on yet.

Files5 files · 17.0 KB

  • SKILL.md10.0 KB
references/4
  • django-orm.md1.7 KB
  • django-views.md1.8 KB
  • drf-permissions.md2.0 KB
  • tenant-isolation.md1.5 KB

Its license does not let Harness hand out copies: Codeg fetches the files from GitHub at this commit and checks their hashes.

Versions

  1. #1—latestOct 7, 2026