When I was using function-based views, I used to do this a lot:
def my_view(request, username):
user = get_object_or_404(User, username = username)
if user != request.user:
return HttpRequestForbidden()
This coded made sure that only user john
could access pages like /users/john/edit/
.
How can I do the same using class-based views?