How to limit the ability to go to a specific url?

Question

Django

Good afternoon.
The bottom line is that there is a CBV for updating an existing record in the database:

class ResumeUpdate(UpdateView):
    model = UserResume
    form_class = ResumeForm
    template_name = 'InteractiveProfile/update_resume.html'

url:

url(r'(?P<pk>[0-9])_resume/update/$',
                           ResumeUpdate.as_view(success_url=('/profiles/')),
                           name='user_resume_update'),

pk in this case is the user id.
Actually, the problem is that any user can enter any value in the url and go to edit another user's page. How can I prevent him from doing this?

Answer 1

Something like this

from django.core.exceptions import PermissionDenied

if resume.user_id != self.request.user.id:
    raise PermissionDenied