Implements two feed enhancements: (1) superadmin ability to delete activities, (2) RSS feed subscription for activity updates.

Changes

Backend

• website/views/organization.py: Added delete_activity view with @login_required, @require_POST, and superuser authorization check. Returns 403 for non-superusers.
• website/feeds.py: New ActivityFeed class extending Django's Feed. Provides RSS 2.0 feed with latest 50 activities including title, description, author, and timestamp.
• blt/urls.py: Added endpoints:
  • POST /activity/delete/<id>/ for deletion
  • GET /feed/rss/ for RSS feed

Frontend

• website/templates/feed.html:
  • Orange RSS button with icon at page top
  • Gray delete button visible only to request.user.is_superuser
  • deleteActivity() JavaScript with confirmation dialog

Security

• Multi-layer authorization: login + POST-only + superuser check
• CSRF protection on POST requests
• Confirmation dialog prevents accidental deletions

Tests

• website/test_feed.py: 9 tests covering feed access, authorization checks, delete execution, RSS generation, and UI element visibility

UI Changes

Top: RSS subscription button (orange, standard RSS color)
Bottom: Delete button for superadmins (gray, with confirmation)

Example Usage

Delete an activity (superadmin only):

// Confirmation dialog shown first
deleteActivity(activityId);
// → POST /activity/delete/{id}/
// → Returns: {"success": true, "message": "Activity deleted successfully"}

Subscribe to feed:

curl https://example.com/feed/rss/
# Returns RSS 2.0 XML with latest 50 activities

Files Changed

blt/urls.py                   |   4 +
website/feeds.py              |  51 ++++++
website/templates/feed.html   |  40 +++++
website/test_feed.py          | 128 ++++++++++++++
website/views/organization.py |  13 ++

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.