It is best practice to exclude the `user` field from forms for models that contain them. The user can be attached manually after the form has validated prior to save. This is to prevent the case that someone submits form data already containing the user ID that is not theirs. The pattern is:

```python
form = ResultSetForm(data)

if form.is_valid():
    instance = form.save(commit=False)
    instance.user = request.user
    instance.save()
```