def METHOD_NAME(request, pk):
    workout = get_object_or_404(Workout.both, pk=pk)
    if request.user != workout.user:
        return HttpResponseForbidden()
    workout.is_template = False
    workout.is_public = False
    workout.save()
    return HttpResponseRedirect(workout.get_absolute_url())