如何在Django中限制代表另一个用户插入数据？

from django.contrib.auth.models import User

class YourModel(models.Model):
    # other fields
    created_by = models.ForeignKey(User, on_delete=models.CASCADE)

from django.shortcuts import get_object_or_404

def create_data(request):
    if request.method == 'POST':
        form = YourForm(request.POST)
        if form.is_valid():
            data = form.save(commit=False)
            data.created_by = request.user  # 设置创建者为当前登录用户
            data.save()
            return redirect('success')
    else:
        form = YourForm()
    return render(request, 'create_data.html', {'form': form})

from django.contrib.auth.decorators import login_required

@login_required
def create_data(request):
    # ...