def wrapper(*args, **kw):
user = get_current_user()
if not user:
return abort(403)
return controller(*args, **kw)
def inject_accounts():
g.accounts = Account.query.all()
g.user = get_current_user()
