[Answer]-Django HttpResponseForbidden raised without calling view function

May be it’s because of you forgot include csrf token in request.
If you using html form, include csrf_token tag in it

<form ...
    {% csrf_token %}
    ...

If you use ajax request – read the documentation how to use ajax and csrf protection https://docs.djangoproject.com/en/1.5/ref/contrib/csrf/