Django is_staff permission decorator
is_staff isn't a permission so instead of permission_required you could use:
@user_passes_test(lambda u: u.is_staff)or
from django.contrib.admin.views.decorators import staff_member_required@staff_member_required
for Class Based Views you can add permission_required('is_staff') to the urls.py:
from django.contrib.auth.decorators import permission_requiredurl(r'^your-url$', permission_required('is_staff')(YourView.as_view()), name='my-view'),
For class-based views, the UserPassesTestMixin is convenient, e.g.
class ImportFilePostView(LoginRequiredMixin, UserPassesTestMixin): def test_func(self): return self.request.user.is_staff ...