Prevent non-superusers from modifying site settings

Review Request #36 - Created Sept. 17, 2016 and updated

guest4420
Review Board
5480b16...
demo
Previously, any staff member (superuser or non-superuser) could change
any of the site settings. We now prevent all non-superuser staff members
from accessing site settings views so that they cannot. A new decorator
(similar to Django's `staff_member_required`) has been added to
accomplish this.

Testing Done:
- Manually verified that superusers can still change settings.
- Manually verified that non-superusers are shown a permission denied
  page.
- Manually verified that unauthenticated users are shown a login form.

Reviewed at https://reviews.reviewboard.org/r/8330/


Loading...