From c52bac05b3425caba93296058614fcdb597c73ab Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Martin=20P=C3=A9pin?= <kerl@wkerl.me>
Date: Sun, 7 Jun 2020 21:01:54 +0200
Subject: [PATCH] Restrict bds views to the staff

---
 bds/mixins.py | 5 +++++
 bds/views.py  | 5 +++--
 2 files changed, 8 insertions(+), 2 deletions(-)
 create mode 100644 bds/mixins.py

diff --git a/bds/mixins.py b/bds/mixins.py
new file mode 100644
index 00000000..14fac693
--- /dev/null
+++ b/bds/mixins.py
@@ -0,0 +1,5 @@
+from django.contrib.auth.mixins import PermissionRequiredMixin
+
+
+class StaffRequiredMixin(PermissionRequiredMixin):
+    permission_required = "bds:is_team"
diff --git a/bds/views.py b/bds/views.py
index a8d78c42..a2ba3a2c 100644
--- a/bds/views.py
+++ b/bds/views.py
@@ -2,9 +2,10 @@ from django.http import Http404
 from django.views.generic import TemplateView
 
 from bds.autocomplete import bds_search
+from bds.mixins import StaffRequiredMixin
 
 
-class AutocompleteView(TemplateView):
+class AutocompleteView(StaffRequiredMixin, TemplateView):
     template_name = "bds/search_results.html"
 
     def get_context_data(self, *args, **kwargs):
@@ -19,5 +20,5 @@ class AutocompleteView(TemplateView):
         return ctx
 
 
-class Home(TemplateView):
+class Home(StaffRequiredMixin, TemplateView):
     template_name = "bds/home.html"