Introduction to Django Authentication System

Who is sending this request, and what is that person allowed to do? Every page on the blog that shows "Hello, John" or hides an Edit button has to answer both questions. Checking who someone is, usually with a username and a password, is called authentication. Deciding what an identified user may do, such as editing an article, is called authorization.

Django ships with one system that handles both. This chapter follows it through the blog: creating and managing accounts, logging users in and out, closing pages to visitors who have not logged in, and granting permissions