interate on multiuser view

atlas/templates/atlas/base.html

@@ -145,9 +145,11 @@
                         <li class="nav-item">
                             <a class="nav-link" href="{% url 'atlas:question_schema_overview' %}" title="View and edit question schemas"><i class="bi bi-journal-text me-1" aria-hidden="true"></i>Question Schemas</a>
                         </li>
+                        {% if request.user.is_staff %}
                         <li class="nav-item">
                             <a class="nav-link" href="{% url 'atlas:multiuser_dashboard' %}" title="Multiuser case sync and review"><i class="bi bi-people me-1" aria-hidden="true"></i>Multiuser Sync</a>
                         </li>
+                        {% endif %}
                         <li class="nav-item">
                             <a class="nav-link" href="{% url 'atlas:help' %}" title="View the atlas help pages"><i class="bi bi-question-circle me-1" aria-hidden="true"></i>Help</a>
                         </li>

atlas/views.py

@@ -10480,7 +10480,7 @@ def collection_case_displaysetup(request, collection_id, case_number=None, case_
     })
 
 
-@login_required
+@staff_member_required
 def multiuser_dashboard(request):
     import datetime
     from django.utils import timezone
@@ -10495,7 +10495,7 @@ def multiuser_dashboard(request):
     })
 
 
-@login_required
+@staff_member_required
 def multiuser_create_session(request):
     name = request.POST.get("name", "").strip()
     session = MultiuserSession.objects.create(
@@ -10505,7 +10505,7 @@ def multiuser_create_session(request):
     return redirect("atlas:multiuser_session_detail", session_id=session.id)
 
 
-@login_required
+@staff_member_required
 def multiuser_session_detail(request, session_id):
     session = get_object_or_404(MultiuserSession, id=session_id)
     is_manager = (request.user == session.creator)
@@ -10517,7 +10517,7 @@ def multiuser_session_detail(request, session_id):
     })
 
 
-@login_required
+@staff_member_required
 def multiuser_search_cases(request, session_id):
     from django.http import HttpResponseForbidden
     session = get_object_or_404(MultiuserSession, id=session_id)
@@ -10537,7 +10537,7 @@ def multiuser_search_cases(request, session_id):
     })
 
 
-@login_required
+@staff_member_required
 def multiuser_case_content_partial(request, session_id):
     session = get_object_or_404(MultiuserSession, id=session_id)
     case = session.active_case
@@ -10558,7 +10558,7 @@ def multiuser_case_content_partial(request, session_id):
     })
 
 
-@login_required
+@staff_member_required
 @require_POST
 def multiuser_load_case(request, session_id):
     from django.http import HttpResponseForbidden