Updated... authenticated is not good enough. Check that the user is_staff to show models. A user can be authenticated in Django and not have admin site access. They should not be able to see the models.