{% if request.user.is_authenticated and profile.user == request.user %} your form {% else %} u cannot edit that profile - its not yours... {% endif %}