Django

views.py

@login_required()
@permission_required('venue.add_space', raise_exception=True)
def new_space(request, venue_id):

		venue = Venue.objects.get(id = venue_id)
		if not venue.owner == request.user:
				return HttpResponseForbidden()
		else:
				context = {'form': SpaceForm, 'venue': venue}
				if request.method == 'POST':
						form = SpaceForm(request.POST)
						if form.is_valid():
								new_space = form.save(commit=False)
								new_space.venue = venue
								# set user ownership
								new_space.owner = request.user
								new_space.save()
								return HttpResponseRedirect(reverse('space_listing'))
						else:
								return render(request, 'spaces/create.html', {'form': form, 'venue': venue})
				else:
						form = SpaceForm()
				return render(request, 'spaces/create.html', context)