Could also be moved into that helper function/decorator that does the security checks. Set the logged in user on the class as an attribute maybe.