[Answered ]-Is request.user.is_authenticated() necessary here?

by

2👍

✅

You do not need to check is_authenticated(). Non-authenticated users will have an AnonymousUser object in request.user, and that type of object should respond False to all is_staff checks without exception.

👤Andrew Gorcester

0👍

No need as request.user.is_staff will check both authentication and staff status.

👤dsixnine

Leave a comment