admin_user.py 文件源码

def restrict_to_admin_users():
    g.user = None
    if 'user' in session:
        g.user = User.get_by_id(session['user'])

    if not g.user or not g.user.is_admin:
        session.pop('user', None)
        abort(403)