Added permission

dashboard/templates/base.html

@@ -21,6 +21,7 @@
           <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarToggle" aria-controls="navbarToggle" aria-expanded="false" aria-label="Toggle navigation">
           <span class="navbar-toggler-icon"></span>
           </button>
+          {% if user.is_staff %}
           <div class="collapse navbar-collapse" id="navbarToggle">
             <div class="navbar-nav mr-auto">
               <a class="nav-item nav-link" href="{% url 'review-list' %}">All Reviews</a>
@@ -31,6 +32,7 @@
                 <a class="nav-item nav-link" href="{% url 'leader-board' 12345 %}">Leaderboard</a>
             </div>
           </div>
+          {% endif %}
         </div>
       </nav>
         {% if messages %}

dashboard/views.py

@@ -8,7 +8,7 @@ from review.forms import ReplyForm
 from gauth.models import Location
 from review.review_utils import reply_review
 from django.core.paginator import Paginator, EmptyPage, PageNotAnInteger
-from django.contrib.auth.mixins import LoginRequiredMixin
+from django.contrib.auth.mixins import LoginRequiredMixin, PermissionRequiredMixin
 
 
 class ReviewListByLocationView(LoginRequiredMixin, View):
@@ -47,7 +47,8 @@ class ReviewListView(LoginRequiredMixin, View):
         return render(request, 'review_list.html', context)
 
 
-class UnRepliedReviewList(LoginRequiredMixin, View):
+class UnRepliedReviewList(LoginRequiredMixin, PermissionRequiredMixin, View):
+    permission_required = 'is_staff'
 
     def post(self, request, *args, **kwargs):
         form = ReplyForm(self.request.POST)