Access policy SDK and provider support

Choose an integration

Python SDK 0.2.1 supports caller-bound check_resources, filter_allowed, and get_allowed_actions. Start with Python SDK setup, then use the runtime-check guide for response and failure behavior.

Although the Python signatures contain optional principal arguments, an explicit principal payload is rejected by the public backend. Use only the authenticated caller.

The JavaScript SDK's policy calls (Policy.checkResource and Policy.getAllowedActions) and the Refine accessControlProvider don't work with the current API yet. Use the Python SDK for runtime checks. Review the current Refine integration status. Registering a Refine provider doesn't protect routes; CanAccess and useCan only decide what to show, and TaruviBase always enforces policies on the server.