Require wagtail admin permission for import views (#588)

Change the permission of CSV import/export and import Index to require
admin permission

Author: jlchilders11

coderedcms/views.py

@@ -7,7 +7,7 @@
     HttpResponsePermanentRedirect,
     JsonResponse,
 )
-from django.contrib.auth.decorators import login_required
+from django.contrib.auth.decorators import login_required, permission_required
 from django.contrib.contenttypes.models import ContentType
 from django.core.paginator import (
     Paginator,
@@ -278,6 +278,10 @@ def event_get_calendar_events(request):
 
 
 @login_required
+@permission_required(
+    "wagtailadmin.access_admin",
+    login_url="wagtailadmin_login",
+)
 def import_index(request):
     """
     Landing page to replace wagtailimportexport.
@@ -286,6 +290,10 @@ def import_index(request):
 
 
 @login_required
+@permission_required(
+    "wagtailadmin.access_admin",
+    login_url="wagtailadmin_login",
+)
 def import_pages_from_csv_file(request):
     """
     Overwrite of the `import_pages` view from wagtailimportexport.  By default, the `import_pages`