ensured my_list is viewable by auth user only

src/apps/dashboard/views.py

@@ -1,3 +1,4 @@
+from django.http import HttpResponseForbidden
 from django.shortcuts import redirect, render
 from .forms import ExistingListItemForm, ItemForm
 from .models import Item, List
@@ -31,4 +32,8 @@ def view_list(request, list_id):
             
 def my_lists(request, user_id):
     owner = User.objects.get(id=user_id)
+    if not request.user.is_authenticated:
+        return redirect("/")
+    if request.user.id != owner.id:
+        return HttpResponseForbidden()
     return render(request, "apps/dashboard/my_lists.html", {"owner": owner})