Agreed. There no need to add the user.is_superuser or authenticated parts either. Just check if there is a value for tshirt.