How to allow certain actions only to authorized users?

Question

Django

Added the ability to log in and register, I'm trying to make the possibility of certain actions only for authorized ones. Here is the code:

def deleteResult(request, item_id):
    if request.user.is_authenticated:
        try:
            item = Results.objects.get(item_id=item_id)
            item.delete()
            return HttpResponseRedirect("/results")
        except Items.DoesNotExist:
            return HttpResponseNotFound("<h2>Result not found</h2>")

How would it work, if the user is logged in, then the item is deleted and everything is fine, if the user is not logged in, then it is not deleted, but it displays an error:

Changed request.user.is_authenticatedto user.is_authenticated, the effect is the same. How to get rid of the error?

Answer 1

If the user is not authorized, the function returns None, add something there, for example, a redirect to the authorization page

def deleteResult(request, item_id):
    if request.user.is_authenticated:
        try:
            item = Results.objects.get(item_id=item_id)
            item.delete()
            return HttpResponseRedirect("/results")
        except Items.DoesNotExist:
            return HttpResponseNotFound("<h2>Result not found</h2>")
    return HttpResponseRedirect('/register')

Well, it’s better, of course, to use reverse, and not hardcode urls
https://docs.djangoproject.com/en/3.1/ref/urlresolvers/
Well, it would be nice in principle to use the @login_required special decorator https
://docs.djangoproject .com/en/3.1/topics/auth/...

Answer 2

And you try to understand what they write to you in an error, and not stupidly accidentally edit the code.