On Feb 24, 2:36 pm, CrabbyPete <pete.do...@gmail.com> wrote: > I have code that allows an anonymous user to look at some elses page, > but I want to limit what they can do so I have the following code > > def show(request): > u = request.GET['friend'] > user = User.objects.get(pk=u) > visit = user.is_authenticated() > > visit should be false, but it keeps coming back as true, even though > no one is logged in. Why and can I force user to be logged out?
If you have a User object, is_authenticated is always True - look at the code in django.contrib.auth.user.models, is_authenticated is simply 'return True'. Of course this doesn't have anything to do with whether or not that user is logged in. What you actually want to check is whether user == request.user -- DR. -- You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-us...@googlegroups.com. To unsubscribe from this group, send email to django-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/django-users?hl=en.
