Search code examples
djangopython-3.xauthenticationabstractuser

Django - Login required for specific user type


I extended the user login from Django with AbstractUser like this:

class User(AbstractUser):
    pass
class Seller(models.Model):
    user = models.OneToOneField(User, on_delete=models.CASCADE)
    verified = models.BooleanField(default=False)
    money = models.IntegerField(default=0)

def __str__(self):
    return str(self.user)

I would like now to create a view and a form that can only be access by the "Seller" user, like this in views.py:

@login_required
def account(request):
    return render(request= request,
               template_name='main/account.html',
               context = {})

Any idea on how can I do it? Thank you


Solution

  • You can make use of the @user_passes_test decorator [Django-doc]:

    from django.contrib.auth.decorators import user_passes_test
    
    def is_seller(user):
        try:
            return user.is_authenticated and user.seller is not None
        except Seller.DoesNotExist:
            return False
    
    @user_passes_test(is_seller)
    def account(request):
        # …

    This will only allow users that are authenticated, and for which the related Seller object exists.