Everything TurboDRF does,
and how to configure it.

pyproject.toml is the source of truth for supported versions.

This builds a small book API in a new Django project: two models, two roles, and one user per role. It assumes a project created with django-admin startproject mysite . and an…

Every TurboDRF model needs a turbodrf() classmethod that returns a config dict:

TurboDRF supports three permission modes.

Define searchable fields in the turbodrf() config dict (preferred) or as a searchablefields class attribute:

TurboDRF serves list views through a compiled path that uses Django's .values() + F() annotations instead of DRF serializers. The database returns each row as a dict, so no…

Run Django's python manage.py check in CI and before each deploy. It imports your URLconf, which creates TurboDRFRouter() and runs all of TurboDRF's startup checks. Tenancy…

Status: experimental — unit-tested with mocks; not verified against a live django-allauth installation in this codebase.

TurboDRF enforces row-level access control through predicates declared on each model. Every list / detail / PATCH / DELETE is filtered by the user's predicate Q. Writes are…

Endpoints require authentication unless publicaccess: True is explicitly set.

A model's tenantfield, ownerfield and visibility scope its rows whether or not TURBODRFTENANTMODEL is set. A project that declares none of them and doesn't set…

Every TurboDRF setting in one place. Defaults shown in bold. Everything that's not strictly required is gated and off by default.

Instructions for AI coding agents working in projects that use TurboDRF. Follow these conventions to configure the framework correctly and avoid the security footguns.…