Hide sensitive information from non-staff users
Use Django permissions model