Restricted access to panel pages

smash/smash/settings.py

@@ -101,4 +101,8 @@ USE_TZ = True
 STATIC_URL = '/static/'
 MEDIA_URL = '/media/'
 
+# Used for @login_required ecosystem
+LOGIN_URL = '/login'
+LOGOUT_URL = '/logout'
+
 from local_settings import *

smash/web/api_views.py

 from .models import *
 from .forms import *
 
+from django.contrib.auth.decorators import login_required
 from django.http import JsonResponse
 
+
 def cities(request):
     X = Subject.objects.filter(city__isnull=False).values_list('city').distinct()
     return JsonResponse({

smash/web/views.py

 from __future__ import unicode_literals
+from django.contrib.auth.decorators import login_required
 from django.shortcuts import redirect, render
 from django.http import HttpResponse
 from django.template import loader
@@ -59,6 +60,7 @@ def login(request):
 """
 Saturates response with information about logged user
 """
+@login_required
 def wrap_response(request, template, params):
 	person, role = Worker.get_details(request.user)