from django.contrib.auth.decorators import login_required
from django.shortcuts import render
from your_app.models import ToDo

@login_required
def todos_for_user(request):
    todos = ToDo.objects.filter(user=request.user)
django: keep each users data separate