added groups will add a small file containing useful commands for adding users in it

reValuate/home/views.py

@@ -7,12 +7,19 @@ from django.conf import settings
 def homePage(request):
     iter_var = 0
     all_balance = []
-    
+    Cashier = False
+    Processor = False
 
     try:
         balObject = Balance.objects.filter(user=request.user.id)
         userBalance = balObject.values("balanceValue")
         userQR = f"Name = {request.user.username}, Date Joined = {request.user.date_joined.date()}, ID = {request.user.id}, Balance = {userBalance[0]['balanceValue']}"
+        if request.user.groups.filter(name='Cashier').exists():
+            Cashier = True
+        elif request.user.groups.filter(name='Processor').exists():
+            Processor = True
+        else:
+            pass
         a = Balance.objects.all()
 
         for user in a:
@@ -20,6 +27,8 @@ def homePage(request):
         print(f"{all_balance}")
         limited_coins = settings.ALL_COINS - sum(all_balance)
         context = {
+            "isCashier": Cashier,
+            "isProcessor": Processor,
             "userQR":userQR,
             "fullbalance": limited_coins,
             "currencyTotal": sum(all_balance),

reValuate/templates/adminView.html

@@ -42,7 +42,6 @@
 
 {% block content %}
 <div class="centered">
-{% if request.user.is_superuser %}
 
     {% if image %}
       <form method="post">
@@ -83,12 +82,7 @@
     </div>
 
 
-{% else %}
 
-  <h1>Unauthorized</h1>
-	</div>
-
-{% endif %}
 {% endblock %}
 
 

reValuate/templates/home.html

@@ -34,13 +34,18 @@
 {% endif %}
 
                        </li>
-					   <li class="nav-item d-none d-md-block" >
 					   
-						{% if user.is_superuser %}
+					   {% if isProcessor %}
+					   <li class="nav-item d-none d-md-block" >
 											  <a class="nav-link" href="/admin/">Админ</a>
+							</li>
 						{% endif %}
 						
+						{% if isCashier %}
+						<li class="nav-item d-none d-md-block">
+							<a class="nav-link" href="/remove_balance/">Каса</a>
 						</li>
+						{% endif %}
      
                   </ul>
                   <ul class="navbar-nav ml-auto" style="right: 0; left: auto;">

reValuate/templates/removeBalance.html

@@ -4,26 +4,20 @@
 
 
 {% block content %}
-<div class="centered">
+<div class="centered" style="text-align: center;">
-
-{% if request.user.is_superuser %}
 
 
-	<p>Hello, {{ user.username }} !</p>
+	
+	<p>Hello, {{ user.username }} !</p><br>
 		
 		<form method="post" enctype="multipart/form-data">
 			{% csrf_token %}
-			<input name="user_instance" id="user_instance" placeholder="Pencho Slaveikov"><br>
+			<input name="user_instance" id="user_instance" placeholder="Enter userID here"><br><br>
-			<input name="tokens" id="tokens" placeholder="523...">
+
-			<button type="submit">Upload</button>
+			<input name="tokens" id="tokens" placeholder="Enter number of tokens to remove"><br><br>
+			<button type="submit" class="Buttons">Upload</button>
 		</form>
 		
 		
 	
-{% else %}
-
-		<h1>Unauthorized</h1>
-		</div>
-
-{% endif %}
 {% endblock %}

reValuate/users/views.py

@@ -6,6 +6,8 @@ from django.shortcuts import render, redirect, get_object_or_404
 from django.contrib.auth.models import User
 from django.contrib import messages
 from upload.models import Media
+from django.core.exceptions import PermissionDenied
+
 
 # need to make oauth facebook login
 class SignUpView(generic.CreateView):
@@ -37,6 +39,7 @@ def addToBalance(request):
         return render(request,"addBalance.html")
 
 def removeBalance(request):
+    if request.user.groups.filter(name='Cashier').exists():
         balRem = None
         if request.method == "POST":
             tokens = request.POST["tokens"]
@@ -54,6 +57,8 @@ def removeBalance(request):
             return render(request,"getBalance.html", {"userBalance":balRem})
         else:
             return render(request,"removeBalance.html")
+    else:
+        raise PermissionDenied("Unauthorized")
 
 def getBalance(request):
     balObject = Balance.objects.filter(user=request.user.id)
@@ -65,6 +70,9 @@ def getBalance(request):
     return render(request,"getBalance.html", {"userBalance":userBalance} )
     
 def adminView(request):
+    
+    if request.user.groups.filter(name='Processor').exists():
+
         try:
             latestPicture = Media.objects.filter(tokenized=None)
             latestPicture, userId, date, time, is_video = latestPicture.values("image")[0]["image"], latestPicture.values("user_id")[0]["user_id"], latestPicture.values("date")[0]["date"], latestPicture.values("time")[0]["time"], latestPicture.values("is_video")[0]["is_video"]
@@ -100,3 +108,5 @@ def adminView(request):
             return render(request, "adminView.html", {"time":time, "date":date,"image":latestPicture, "userId":userId, "username":username, "is_video":is_video})   
         except IndexError:
             return render(request, "adminView.html")   
+    else:
+        raise PermissionDenied("Unauthorized")