From 3c82d8e3af4a88c65146ef9e8672e9bef1863f1c Mon Sep 17 00:00:00 2001 From: Fuzzwah Date: Sat, 27 Jul 2024 16:11:52 +1000 Subject: [PATCH] if email, compare id. else, compare username --- .../{{cookiecutter.project_slug}}/users/views.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/{{cookiecutter.project_slug}}/{{cookiecutter.project_slug}}/users/views.py b/{{cookiecutter.project_slug}}/{{cookiecutter.project_slug}}/users/views.py index f2c26895a..ea1dc9455 100644 --- a/{{cookiecutter.project_slug}}/{{cookiecutter.project_slug}}/users/views.py +++ b/{{cookiecutter.project_slug}}/{{cookiecutter.project_slug}}/users/views.py @@ -22,7 +22,11 @@ class UserDetailView(LoginRequiredMixin, DetailView): def get_object(self, queryset=None): obj = super().get_object(queryset) + {%- if cookiecutter.username_type == "email" %} + if obj.id != self.request.user.id: + {%- else %} if obj.username != self.request.user.username: + {%- endif %} raise PermissionDenied return obj