Template permission checks in Django - Mini Project: Build & Apply

Template Permission Checks in Django

📖 Scenario: You are building a simple Django web page that shows different messages based on user permissions. This is like a club where only members with certain badges can see special sections.

🎯 Goal: Create a Django template that checks if a user has specific permissions and shows messages accordingly.

📋 What You'll Learn

Create a Django context dictionary with a user and their permissions

Add a variable to represent a specific permission to check

Use Django template syntax to check if the user has that permission

Display a message in the template if the user has the permission

💡 Why This Matters

🌍 Real World

Web applications often need to show or hide parts of a page based on user permissions, like admin panels or special content.

💼 Career

Knowing how to check permissions in Django templates is essential for backend and full-stack developers working on secure web apps.

1

Create user permissions data

Create a dictionary called user_permissions with these exact keys and values: 'username': 'alice' and 'permissions': ['view_reports', 'edit_profile'].

Django

# Create the user_permissions dictionary with username and permissions list
# Your code here

Need a hint?

Use a dictionary with keys 'username' and 'permissions'. The permissions value is a list of strings.

2

Add permission to check

Add a variable called required_permission and set it to the string 'view_reports'.

Django

user_permissions = {'username': 'alice', 'permissions': ['view_reports', 'edit_profile']}
# Add the required_permission variable below
# Your code here

Need a hint?

Just create a string variable with the exact name and value.

3

Write template permission check

Write a Django template string called template_code that uses {% if required_permission in user_permissions.permissions %} to check permission and shows <p>Access granted to reports.</p> inside the if block.

Django

user_permissions = {'username': 'alice', 'permissions': ['view_reports', 'edit_profile']}
required_permission = 'view_reports'
# Write the Django template string with permission check below
# Your code here

Need a hint?

Use triple quotes for the template string and the Django if tag with the exact variable names.

4

Complete template with else message

Extend the template_code string to add an {% else %} block that shows <p>Access denied.</p> when the user lacks the permission.

Django

user_permissions = {'username': 'alice', 'permissions': ['view_reports', 'edit_profile']}
required_permission = 'view_reports'
template_code = """{% if required_permission in user_permissions.permissions %}\nAccess granted to reports.\n{% endif %}"""
# Add an else block with access denied message inside template_code
# Your code here

Need a hint?

Use the Django else tag inside the template string with the exact messages.