start working on managed IPs

capsulflask/auth.py

@@ -31,6 +31,22 @@ def account_required(view):
 
     return wrapped_view
 
+
+def admin_account_required(view):
+    """View decorator that redirects non-admin users to the login page."""
+
+    @functools.wraps(view)
+    def wrapped_view(**kwargs):
+        if session.get("account") is None or session.get("csrf-token") is None:
+            return redirect(url_for("auth.login"))
+
+        if session.get("account") not in current_app.config["ADMIN_EMAIL_ADDRESSES_CSV"].split(","):
+            return redirect(url_for("auth.login"))
+
+        return view(**kwargs)
+
+    return wrapped_view
+
 @bp.route("/login", methods=("GET", "POST"))
 def login():
     if request.method == "POST":