Protect rrequests

rrequests/views.py

@@ -4,6 +4,7 @@ from django.urls import reverse
 from django.views.generic import FormView
 from django.contrib.auth.mixins import LoginRequiredMixin
 from django.contrib.auth.decorators import login_required
+from django.db.models import Q
 
 from django.utils import timezone
 
@@ -53,7 +54,8 @@ class RrequestCreate(LoginRequiredMixin, FormView):
 
 @login_required
 def rrequestDetail(request, pk):
-	reqObj = get_object_or_404(Request, pk=pk)
+	mnts = request.user.maintainer_set.all()
+	reqObj = get_object_or_404(Request.objects.filter(Q(provider__in=mnts) | Q(applicant__in=mnts)), pk=pk)
 
 	mnts = request.user.maintainer_set.all()
 	formClass = None