From d1b01fd0101ebe028fdf0683da978bc512c6f75e Mon Sep 17 00:00:00 2001
From: Mark Hoekveen <mark@hoekveen.net>
Date: Sat, 3 Aug 2024 23:23:20 +0200
Subject: [PATCH] auth on playlist import

---
 playlist/views.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/playlist/views.py b/playlist/views.py
index b69277a..d706e07 100644
--- a/playlist/views.py
+++ b/playlist/views.py
@@ -262,7 +262,8 @@ class PlaylistImportView(LoginRequiredMixin, View):
     def get(self, request):
         return HttpResponseRedirect('/settings/')
     def post(self, request):
-        print("...")
+        if not request.user.is_superuser:
+            return HttpResponseRedirect('/settings/')
         playlist_link = self.request.POST['playlist_link']
         m = re.match(r"^https:\/\/open.spotify.com\/playlist\/([a-zA-Z0-9]+)\??", playlist_link)
         playlist_id = m.group(1)