university-final-iot-backend/app/api/permission_protection.py

from flask import g
from flask_restful import abort
from functools import wraps


valid_permissions = [
        'CREATE_DEVICE_TYPE',
        'CREATE_ROLE',
        'ASSIGN_ROLE',
        'CREATE_DEVICE',
        'CREATE_DASHBOARD',
        'READ_DEVICE_TYPES',
        'READ_ROLES']


def requires_permission(permission, action_name='Action'):
    if permission not in valid_permissions:
        raise ValueError('Permission ' + str(permission) + ' does not exist!')

    def requires_permission_decorator(func):
        @wraps(func)
        def permission_protected_function(*args, **kwargs):
            if permission not in g.current_account.role.permissions:
                abort(403,
                      message=(action_name+' is not allowed'),
                      status='error')

            return func(*args, **kwargs)

        return permission_protected_function

    return requires_permission_decorator