Require admin login for some pages

[alexander-bauer]

Some pages have the @app.login_required directive, but do not otherwise check whether the logged in user is an admin.

[alexander-bauer]

This can be accomplished by building a similar admin_required decorator.

[Mjacks3]

@alexander-bauer ``

[alexander-bauer]

@Mjacks3 We're going to have to write this decorator ourselves, but it should be fairly simple.

[alexander-bauer]

Since the @admin_required directive is implemented now, all that's left to do is make sure editing of accounts is properly locked down. @Mjacks3 can you take care of that?

[Mjacks3]

yup. leave it to me!

[Mjacks3]

@alexander-bauer I tested (admin) account creation, editing, deletion and profile editing. all good (user) profile editing, edit accounts page access, non-self profile access and self deletion. all success

[alexander-bauer]

@Mjacks3 I just poked at the code, and it looks good. I'm comfortable closing this.