protected views with staff required decorator