API Authentication and Permissions¶

Authentication Model¶

• Django authentication with allauth integration.
• Login is required for most application pages and endpoints.
• MFA policies are enforced by middleware settings.

Permission Expectations¶

• Access is typically scoped by selected project and user role.
• Write actions should be limited to authorized contributors.
• Governance actions should be limited to elevated roles.