title: Django: restrict user access to their own objects only
body: <p>I'm using @login_required to force users to authenticate before they create any object. but the problem is all authenticated user has access to update objects by object pk, even objects which created by other users.how can I limit user to access to their own objects only? </p>