In the pinax-project-account when a page is rendered we can, with the tag {% if not user.is_authenticated %}
, control the context rendered.
My question is, how is it possible for someone to control which page appears? Say a user tries to hard code a url on the address bar and the user is not supposed to see that url. Any hint on where to start?
Thank you !
What you're looking for is
django.contrib.auth
, and specially thelogin_required
,permission_required
anduser_passes_test
decorators.