django权限:用户只能查看和编辑"his“对象

from django.db import models
from django.contrib.auth.models import User

class Article(models.Model):
    title = models.CharField(max_length=100)
    content = models.TextField()
    author = models.ForeignKey(User, on_delete=models.CASCADE)

from django.shortcuts import get_object_or_404
from django.http import HttpResponseForbidden
from .models import Article

def edit_article(request, article_id):
    article = get_object_or_404(Article, id=article_id)
    if request.user != article.author:
        return HttpResponseForbidden("You do not have permission to edit this article.")
    # 处理编辑逻辑

from django.contrib.auth.mixins import UserPassesTestMixin
from django.views.generic.edit import UpdateView
from .models import Article

class EditArticleView(UserPassesTestMixin, UpdateView):
    model = Article
    fields = ['title', 'content']

    def test_func(self):
        article = self.get_object()
        return self.request.user == article.author