CODEWITHSUNDEEP
pythondjangodjango-modelsdjango-viewsdjango-templates
Pranta Nath Nayan
Pranta Nath Nayan

Reputation: 43

How to track which user is creating object for a model and how to show the object details only to that user in django

I am doing an online classroom project in Django where I created a model named create_course which is accessible by teachers. Now I am trying to design this as the teacher who creates a class only he can see this after login another teacher shouldn't see his classes and how to add students into that particular class I created

the course model

class course(models.Model):
    course_name = models.CharField(max_length=200)
    course_id = models.CharField(max_length=10)
    course_sec = models.IntegerField()
    classroom_id = models.CharField(max_length=50,unique=True)
    created_by = models.ForeignKey(User,on_delete=models.CASCADE)

here if I use "the created_by" field in forms it appears to be a drop-down menu where every user is showing but I want to automatically save the user who creates the object

views.py

def teacher_view(request, *args, **kwargs):
    form = add_course(request.POST or None)
    context = {}
    if form.is_valid():
        form.save()
        return HttpResponse("Class Created Sucessfully")
    context['add_courses'] = form
    return render(request, 'teacherview.html', context)

forms.py

from django import forms
from .models import course

class add_course(forms.ModelForm):
    class Meta:
        model = course
        fields = ('course_name', 'course_id', 'course_sec', 'classroom_id')

Upvotes: 1

Views: 1067

Answers (2)

willeM_ Van Onsem
willeM_ Van Onsem

Reputation: 476699

You can inject the logged in user to the .created_by of the .instance in the form, so:

from django.contrib.auth.decorators import login_required
from django.shortcuts import redirect

@login_required
def teacher_view(request, *args, **kwargs):
    if request.method == 'POST':
        form = add_course(request.POST, request.FILES)
        if form.is_valid():
            form.instance.created_by = request.user
            form.save()
            return redirect('name-of-some-view')
    else:
        form = add_course()
    return render(request, 'teacherview.html', {'add_courses': form})

Note: It is normally better to make use of the settings.AUTH_USER_MODEL [Django-doc] to refer to the user model, than to use the User model [Django-doc] directly. For more information you can see the referencing the User model section of the documentation.

Note: You can limit views to a view to authenticated users with the @login_required decorator [Django-doc].

Note: Usually a Form or a ModelForm ends with a …Form suffix, to avoid collisions with the name of the model, and to make it clear that we are working with a form. Therefore it might be better to use CourseForm instead of add_course.

Note: Models in Django are written in PascalCase, not snake_case, so you might want to rename the model from course to Course.

Note: In case of a successful POST request, you should make a redirect [Django-doc] to implement the Post/Redirect/Get pattern [wiki]. This avoids that you make the same POST request when the user refreshes the browser.

Upvotes: 2

raphael
raphael

Reputation: 2880

In your view use commit=False to stop the form from saving until you add the created_by field.

def teacher_view(request, *args, **kwargs):
    form = add_course(request.POST or None)
    context = {}
    if form.is_valid():
        course = form.save(commit=False)
        course.created_by = request.user
        course.save()
        return HttpResponse("Class Created Sucessfully")
    context['add_courses'] = form
    return render(request, 'teacherview.html', context)

Upvotes: 1

Related Questions