Show submission view only for staff

news/models.py

@@ -4,9 +4,10 @@ from enum import Enum
 
 # Create your models here.
 class PostState(Enum):
+    DRAFT = 0
     PUBLISHED = 1
-    DRAFT = 2
-    PROGRAMMED = 3
+    PROGRAMMED = 2
+    USER_SUBMITTED = 3
 
 class Post(models.Model):
     author = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.CASCADE)

news/templates/base.html

@@ -28,8 +28,10 @@
        {% if user.is_authenticated %}
        <a href="{% url 'news:account' %}">[ {{ user.username }} ]</a>
        <br/>
+       {% if user.is_staff %}
        <a href="{% url 'news:submission' %}">Submit</a>
        <br/>
+       {% endif %}
        <a href="{% url 'news:logout_view' %}">Log out</a>
        {% else %}
        <a href="{% url 'news:signin' %}">Log in</a>

news/views.py

@@ -9,7 +9,7 @@ from django.contrib import messages
 from django.contrib.auth import authenticate, login, logout, update_session_auth_hash
 from django.contrib.auth.decorators import login_required
 from django.contrib.auth.forms import PasswordChangeForm
-from .models import Post, Comment
+from .models import Post, Comment, PostState
 from .forms import PostForm, CustomUserCreationForm, SigninForm
 from datetime import datetime
 import logging
@@ -103,7 +103,10 @@ def submission(request):
             handle_uploaded_file(filename, request.FILES['image'])
 
             post.image_url = filename
-            post.state = 1
+            if request.user.is_staff:
+                post.state = PostState.PUBLISHED
+            else:
+                post.state = PostState.USER_SUBMITTED
             post.save()
 
             return HttpResponseRedirect(reverse('news:submitted'))