Real Python: Django View Authorization: Restricting Access

Django provides tools for both authentication and authorization. Django view authorization is typically done with decorators. This course will show you how to use these view decorators to enforce authorized viewing of pages in your Django site.

By the end of this course you’ll know how to:

• Use HttpRequest and HttpRequest.user objects
• Authenticate and authorize users
• Differentiate between regular, staff, and admin users
• Secure a view with the @login_required decorator
• Restrict a view to different roles with the @user_passes_test decorator
• Use the Django messages framework to notify your users

[ Improve Your Python With 🐍 Python Tricks 💌 – Get a short & sweet Python Trick delivered to your inbox every couple of days. >> Click here to learn more and see examples ]