добавил настройку прав пользователей

index/views.py

@@ -3,7 +3,7 @@ import os
 from django.http import HttpResponse, HttpResponseRedirect, HttpResponseForbidden
 from django.shortcuts import render
 # from django.db.models import Manager
-from django.contrib.auth.decorators import login_required
+from django.contrib.auth.decorators import login_required, permission_required
 
 # только для тестирования!
 import requests
@@ -16,24 +16,20 @@ def view_index(request):
     return render(request, 'index.html')
 
 
+@permission_required(perm='view_logs', raise_exception=True)
 def view_stats(request):
-    if request.user.is_authenticated:
-        # только для тестирования!
-        res = requests.get(TEST_BASE_FETCH + "?stats", headers={'Authorization': os.getenv("TEST_AUTH")})
-        response = HttpResponse(res.content)
-        response.headers["Content-type"] = response.headers["Content-type"]
-        return response
-    else:
-        return HttpResponseForbidden()
+    # только для тестирования!
+    res = requests.get(TEST_BASE_FETCH + "?stats", headers={'Authorization': os.getenv("TEST_AUTH")})
+    response = HttpResponse(res.content)
+    response.headers["Content-type"] = response.headers["Content-type"]
+    return response
 
 
+@permission_required(perm='view_logs', raise_exception=True)
 def view_tank_chart(request):
-    if request.user.is_authenticated:
-        # только для тестирования!
-        days = request.GET.get('days', '7')
-        res = requests.get(TEST_BASE_FETCH + "?tank_chart=" + days, headers={'Authorization': os.getenv("TEST_AUTH")})
-        response = HttpResponse(res.content)
-        response.headers["Content-type"] = response.headers["Content-type"]
-        return response
-    else:
-        return HttpResponseForbidden()
+    # только для тестирования!
+    days = request.GET.get('days', '7')
+    res = requests.get(TEST_BASE_FETCH + "?tank_chart=" + days, headers={'Authorization': os.getenv("TEST_AUTH")})
+    response = HttpResponse(res.content)
+    response.headers["Content-type"] = response.headers["Content-type"]
+    return response