In JobAuthMixin, we can safely provided a wrong job id.

django/allgo/main/mixins.py

@@ -97,7 +97,11 @@ class JobAuthMixin(AllgoValidAccountMixin, UserPassesTestMixin):
         if user is None:
             return False
         self.raise_exception = True # to return a 403
-        job = Job.objects.filter(pk=self.kwargs['pk']).first()
+        try:
+            job = Job.objects.get(id=self.kwargs['pk'])
+        except Job.DoesNotExist:
+            return False
+
         return user.is_superuser or user == getattr(job, "user", ())
 
     def handle_no_permission(self):