Items can only be removed by the requester

templates/list.html

@@ -21,8 +21,10 @@
         {% endif %}</td>
       <td>
         <form>
+          {% if data["username"] == x[3] %}
           <button class="btn btn-secondary" type="submit" formaction="/post" formmethod="POST" name="rem"
             value="{{x[0]}}">Remove</button>
+          {% endif %}
         </form>
       </td>
     </tr>