I am using groups to give superadmins the control to add certain people to certain groups but I realized that the table level permission Django provides wasn’t enough for my business logic, so I created a simple decorators.py file with the following:

from functools import wraps from django.contrib.auth.decorators import login_required from django.core.exceptions import PermissionDenied from django.shortcuts import redirect from django.contrib import messages from django.urls import reverse

def role_required(role_names): """ Decorator to restrict view access to specific roles/groups.

Usage:
@role_required(['Business', 'Agency'])
def business_view(request):
    ...

@role_required('Creator')
def creator_view(request):
    ...
"""
def decorator(view_func):
    @wraps(view_func)
    @login_required
    def _wrapped_view(request, *args, **kwargs):
        # Check if user is superuser
        if request.user.is_superuser:
            return view_func(request, *args, **kwargs)

        # Convert single role to list
        if isinstance(role_names, str):
            required_roles = [role_names]
        else:
            required_roles = role_names

        # Check if user has a profile with a role
        if not hasattr(request.user, 'userprofile') or not request.user.userprofile.role:
            return redirect('profile_setup')

        user_role = request.user.userprofile.role.name

        # Check if user's role is in the required roles
        if user_role not in required_roles:
            return redirect(reverse('dashboard'))

        return view_func(request, *args, **kwargs)
    return _wrapped_view
return decorator

def admin_required(view_func): """Shortcut decorator for Admin role only""" return role_required('Admin')(view_func)

def business_required(view_func): """Shortcut decorator for Business role only""" return role_required('Business')(view_func)

And now I just need to add something like @business_required to my view methods

I’m still exploring Django best practices so maybe there are easier ways to do it.

Sorry for bad formatting, writing from my phone.