博客基础_django_python从入门到实践_匹配用户和数据

内容

　　限制未登录用户访问

　　数据关联到用户/ django验证

　　只允许用户访问自己的主题

　　保护具体主题和编辑页面

　　将新主题关联到当前用户

代码

views.py 　　learning_logs/

--snip
from django.contrib.auth.decorators import login_required

@login_required
def topics(request):
...

@login_required
def topics(request):
...

@login_required
def topics(request):
...

@login_required
def topics(request):
...

@login_required
def topics(request):
...

settings.py　　learning_log/

--snip

LOGIN_URL = 'users/login/'

python manage.py makemigrations
1
1

python manage.py migrate

python manage.py runserver

 

models.py　　learning_logs/models.py

--snip
from django.contrib.auth.models import User

def Topic(models.Model):
    --snip
    owner = models.ForeignKey(User)

python manage.py shell

from django.contrib. auth.models import User

users = User.objects.all()
for user in users:
    print(user.id, user.username)

#
topics = Topic.objects.all()
for topic in topics:
    print(topic, topic.owner)

views.py　　learning_logs/

--snip
def topics(request):
    topics = Topic.objects.filter(owner= request.user).order_by('date_added')

views.py　　 learning_logs/

from django.http import Http404

--snip
def topic(request, topic_id):
    if topic.owner != request.user:
        raise Http404

--snip
def edit_entry(request, entry_id):
    if topic.owner != request.user:
        raise Http404

views.py　　 learning_logs/

--snip
def new_topic(request):
    ...
    if form.is_valid():
        new_topic = form.save(commit= false)
        new_topic.owner = request.user
        new_topic.save()