- refactoringthere are two places in views py where we make sure the user associated with topic matches the currently logged-in user put the code for this check in function called check_topic_owner()and call this function where appropriate - protecting new_entrya user can add new entry to another user' learning log by entering url with the id of topic belonging to another user prevent this attack by checking that the current user owns the entry' topic before saving the new entry - protected blogin your blog projectmake sure each blog post is connected to particular user make sure all posts are publicly accessible but only registered users can add posts and edit existing posts in the view that allows users to edit their postsmake sure the user is editing their own post before processing the form summary in this you learned to use forms to allow users to add new topics and entriesand edit existing entries you then learned how to implement user accounts you allowed existing users to log in and outand you learned how to use django' default usercreationform to let people create new accounts after building simple user authentication and registration systemyou restricted access to logged-in users for certain pages using the @login_ required decorator you then attributed data to specific users through foreign key relationship you also learned to migrate the database when the migration requires you to specify some default data finallyyou learned how to make sure user can see only data that belongs to them by modifying the view functions you retrieved appropriate data using the filter(methodand you learned to compare the owner of the requested data to the currently logged-in user it may not always be immediately obvious what data you should make available and what data you should protectbut this skill will come with practice the decisions we've made in this to secure our usersdata illustrate why working with others is good idea when building projecthaving someone else look over your project makes it more likely that you'll spot vulnerable areas we now have fully functioning project running on our local machine in the final we'll style learning log to make it visually appealingand we'll deploy the project to server so anyone with internet access can register and make an account