安全地处理

保护(“武装”)所有模块端:

from flask import session
book_module = admin.register_module(BookModule, '/books', 'books',
    'book management')
@book_module.secure(http_code=401)
def login_required():
    return "user" in session

保护(“武装”)特定的模块端:

@book_module.secure_endpoint('edit', http_code=403)
def check_edit_credential(view):
    # I'm now signed in, may I modify the ressource?
    return session.user.can_edit_book(view.object)