The only missing feature

[stto3703]

user = authenticate(self)
if not user: return

note = Note.get_by_id(int(noteId)) if noteId else Note(user=user)

if not note:
self.error(404)
return

if note.user and note.user != user:
self.error(403)
return

note.delete()
self.redirect('/')

:)