One possible refactoring is to use Class Based Views, so you don't have to check request.method == "GET" and act differently if it is a post.

Another useful suggestion is to make a ensure_staff decorator, if there is none already in the system.