Restrict all views from the menu to authenticated users

common/templates/base.html

@@ -49,6 +49,7 @@
             <span class="navbar-toggler-icon"></span>
         </button>
         <div class="collapse navbar-collapse" id="navbarNav">
+        {% if request.user.is_authenticated %}
             <ul class="navbar-nav mr-auto">
                 <li class="nav-item" id="nav-entries">
                     <a class="nav-link text-light" href="{% url 'entries:entries' %}">
@@ -74,6 +75,7 @@
                     </li>
                 {% endif %}
             </ul>
+        {% endif %}
         </div>
         <span id="import-status" class="navbar-text text-warning mr-3"></span>
         {% if request.user.is_authenticated %}

dictionary_statistics/views.py

+from django.contrib.auth.decorators import login_required
 from django.shortcuts import render
 from django.utils.translation import gettext as _
 
@@ -7,6 +8,7 @@ from semantics.models import Frame, FrameOpinion
 
 from entries.polish_strings import POS as POS_names, STATUS, SCHEMA_OPINION, FRAME_OPINION
 
+@login_required
 def dictionary_statistics(request):
     ALL = _('wszystkie')
     

entries/views.py

@@ -51,6 +51,7 @@ MAX_LAST_VISITED = 10
 #def test(request):
 #    return render(request, 'test.html', {})
 
+@login_required
 def entries(request):
     # TODO make this automatic by subclassing/configuring session object
     if 'last_visited' not in request.session:
@@ -349,6 +350,7 @@ def get_scroller_params(POST_data):
 #from django.db.models import Count
 
 @ajax_required
+@login_required
 def get_entries(request):
     if request.method == 'POST':
         errors_dict = dict()

phrase_expansions/views.py

 from collections import defaultdict
 
+from django.contrib.auth.decorators import login_required
 from django.shortcuts import render
-
 from django.utils.translation import gettext as _
 
 from phrase_expansions.models import PhraseExpansionType, PhraseExpansion
@@ -14,6 +14,7 @@ def EXPANSION_OPINION():
         'cer' : _('pewne'),
     }
 
+@login_required
 def phrase_expansions(request):
     expansions = defaultdict(list)
     expansions = [

unifier/views.py

 import json
 import requests
+from django.contrib.auth.decorators import login_required
 from django.db import transaction
 from django.http import JsonResponse, HttpResponse
 from django.shortcuts import get_object_or_404
@@ -206,6 +207,7 @@ def get_unified_frame_json(unifiedFrame, request):
     return { 'unified_frame_id': unifiedFrame.id, 'unified_frame': unifiedFrame_dict, 'subentries': subentries, 'frames' : slowal_frames_dict, 'alternations' : alternations, 'realisation_phrases' : realisation_phrases, 'realisation_descriptions' : realisation_descriptions, 'examples' : examples, 'last_visited' : request.session['last_visited'] }
 
 @ajax_required
+@login_required
 def get_unified_frame(request):
     if request.method == 'POST':
         #TODO (*)