Edit only own profile

Author: wsot

src/community_db/forms.py

@@ -10,5 +10,4 @@ class QuickSearchForm(forms.Form):
 class PersonForm(forms.ModelForm):
     class Meta:
         model = Person
-        # fields = ["first_name", "last_name", "country", "mobile_number"]
-        exclude = []
+        fields = ["first_name", "last_name", "country", "mobile_number"]

src/community_db/migrations/0004_person_user.py

@@ -0,0 +1,25 @@
+# Generated by Django 4.1 on 2022-08-31 10:58
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+        ("community_db", "0003_alter_person_options"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="person",
+            name="user",
+            field=models.ForeignKey(
+                null=True,
+                on_delete=django.db.models.deletion.SET_NULL,
+                to=settings.AUTH_USER_MODEL,
+            ),
+        ),
+    ]

src/community_db/models.py

@@ -1,3 +1,4 @@
+from django.conf import settings
 from django.db import models
 
 
@@ -284,6 +285,9 @@ class Countries(models.TextChoices):
     last_name = models.CharField(max_length=100)
     country = models.CharField(max_length=100, choices=Countries.choices, blank=True)
     mobile_number = models.CharField(max_length=20, blank=True)
+    user = models.ForeignKey(
+        settings.AUTH_USER_MODEL, null=True, on_delete=models.SET_NULL
+    )
 
     class Meta:
         permissions = [

src/community_db/views.py

@@ -1,5 +1,5 @@
-from django.contrib.auth.decorators import permission_required
-from django.contrib.auth.views import LoginView
+from django.contrib.auth.decorators import login_required
+from django.contrib.auth.views import LoginView, redirect_to_login
 from django.db import models
 from django.http import HttpResponse, HttpResponseRedirect
 from django.shortcuts import get_object_or_404, render
@@ -31,9 +31,13 @@ def detail_person_with_template(request, pk):
     return render(request, "community_db/person_detail_in_base.html", context)
 
 
-@permission_required("edit_profile")
+@login_required
 def edit_person_with_template(request, pk):
     person = get_object_or_404(Person, id=pk)
+
+    if person.user != request.user:
+        return redirect_to_login(request.path)
+
     if request.POST:
         form = PersonForm(request.POST, instance=person)
         if form.is_valid():