Django验证用户请求

Question

我只是一名学生，目前正在学习django。我在我的Users / models.py中有这个

class Membership(models.Model):
membership_type = models.CharField(max_length=50)
price = models.IntegerField(default=100)
description = models.CharField(max_length=200)

def __str__(self):
    return self.membership_type





class Customer(models.Model):
user = models.OneToOneField(User, on_delete=models.CASCADE)
membership = models.ForeignKey(Membership, on_delete=models.CASCADE,null=True)
reference = models.CharField(max_length=50, null=True)

def __str__(self):
    return self.user.email

这是我的views.py

def BookDetail(request, id):
most_recent = Book.objects.order_by('-timestamp')[:3]
user_membership = get_object_or_404(Customer, user=request.user)
book= get_object_or_404(Book, id=id)
form = CommentForm(request.POST or None)
if request.method == "POST":
    if form.is_valid():
        form.instance.user = request.user
        form.instance.post = book
        form.save()
        return redirect(reverse("book-detail", kwargs={
            'id': book.pk
        }))
context = {
    'user_membership': user_membership,
    'form': form,
    'book': book,
    'most_recent': most_recent,

}
return render(request, 'catalog/book_detail.html', context)

如何在我的book_detail.html中他/她不是客户模型的一部分时验证用户（注意：已编辑）

       {% if request.user != user_membership.user %}
          <button class="site-btn" disabled="disabled">Read</button>
          {% else %}
          {% for content in book.pages %}
         <a href="{{ content.get_absolute_url }}" class="site-btn">Read</a>
          {% endfor %}
        {% endif %}

我有一个错误“没有客户匹配给定的查询。”嗯，我在管理面板中手动添加用户模型中的用户。在注册（信号）期间不会自动添加。但我很好。

Answer 1

您正在为user_membership对象使用上下文变量Customer。这意味着在模板中查找Customer对象时应该使用该名称。例如：

{% if request.user != user_membership.user %}

此外，您还应该确保在request context processor中设置了Django的settings.py，这允许您在模板中使用request对象：

TEMPLATES = [
    {
        'BACKEND': 'django.template.backends.django.DjangoTemplates',
        'APP_DIRS': True,
        'OPTIONS': {
            'context_processors': (
                'django.template.context_processors.request',
            ),
        }
    },
]

更新

如果没有为当前登录用户配置Customer记录，则代码将返回404到浏览器。但是，如果您希望在这种情况下继续渲染模板，则应修改视图，以便将user_membership变量设置为None：

def BookDetail(request, id):
    most_recent = Book.objects.order_by('-timestamp')[:3]
    try: 
        user_membership = Customer.objects.get(user=request.user)
    except Customer.DoesNotExist:
        user_membership = None

然后修改模板以检查是否设置了user_membership：

{% if user_membership and user_membership.user == request.user %}
    {% for content in book.pages %}
        <a href="{{ content.get_absolute_url }}" class="site-btn">Read</a>
    {% endfor %}
{% else %}
    <button class="site-btn" disabled="disabled">Read</button>
{% endif %}

Answer 2

你应该使用类似的东西..

    {% if request.user != customer.user %}
         # disable read btn
    {% else %}
         # show read link
    {% endif %}