move to new domain

backlogger/views.py

@@ -19,7 +19,7 @@ def item_list(request):
     category = request.GET.get('category', '')
     sort = request.GET.get('sort', 'fav')
 
-    items = Item.objects.all()
+    items = Item.objects.filter(user=request.user)
     if category:
         items = items.filter(category=category)
     items = items.order_by(*SORT_MAP.get(sort, SORT_MAP['fav']))
@@ -37,7 +37,9 @@ def item_add(request):
     if request.method == 'POST':
         form = ItemForm(request.POST)
         if form.is_valid():
-            form.save()
+            item = form.save(commit=False)
+            item.user = request.user
+            item.save()
             return redirect('backlogger:list')
     else:
         form = ItemForm()
@@ -46,7 +48,7 @@ def item_add(request):
 
 @login_required
 def item_edit(request, pk):
-    item = get_object_or_404(Item, pk=pk)
+    item = get_object_or_404(Item, pk=pk, user=request.user)
     if request.method == 'POST':
         form = ItemForm(request.POST, instance=item)
         if form.is_valid():
@@ -60,5 +62,5 @@ def item_edit(request, pk):
 @login_required
 def item_delete(request, pk):
     if request.method == 'POST':
-        get_object_or_404(Item, pk=pk).delete()
+        get_object_or_404(Item, pk=pk, user=request.user).delete()
     return redirect('backlogger:list')