django authorization.md

Go to admin page add set the permission for the user under User Permissions, eg

1. <app name> | <model name> | Can add model
2. <app name> | <model name> | Can change model
3. <app name> | <model name> | Can delete model

# views.py
from .models import Secret
from django.contrib.auth.decorators import login_required, permission_required

@login_required
@permission_required('login.view_secret')
def read(request):
  secrets = Secret.objects.all()
  return render(request, 'login/read.html', {'secrets': secrets})