Add permission-checks before allowing the user to add/edit/delete posts. Redirect users to login page if they perform these operations when they're not allowed to. Also Add user-type combo-box to login View. User can't login unless the correct user-type/username/password matches.