Right now a lot of stuff is hard coded in. The positions are dynamic, but the permissions require changing the code. We should brainstorm and add a way for permissions to be dynamic.
The naive way would be to just have a model that maps positions to pages they can access. A potential step above this would be to group pages together, and then have a model mapping positions to groups of pages. If necessary, the groups could be made dynamic too later.
Or we could look into using Django's built in permissions system.
Right now a lot of stuff is hard coded in. The positions are dynamic, but the permissions require changing the code. We should brainstorm and add a way for permissions to be dynamic.
The naive way would be to just have a model that maps positions to pages they can access. A potential step above this would be to group pages together, and then have a model mapping positions to groups of pages. If necessary, the groups could be made dynamic too later.
Or we could look into using Django's built in permissions system.