創建所有版塊的視圖 ``` # 權限判斷，防止跨越訪問 @bp.route('/posts/') @login_required @permission_requeired(CMSPersmission.POSTER) def posts(): return render_template('cms/posts.html') @bp.route('/comments/') @login_required @permission_requeired(CMSPersmission.COMMENTER) def comments(): return render_template('cms/comments.html') @bp.route('/boards/') @login_required @permission_requeired(CMSPersmission.BOARDER) def boards(): return render_template('cms/boards.html') @bp.route('fusers') @login_required @permission_requeired(CMSPersmission.FRONTUSER) def fusers(): return render_template('cms/fusers.html') @bp.route('/cusers/') @login_required @permission_requeired(CMSPersmission.CMSUSER) def cusers(): return render_template('cms/cusers.html') @bp.route('/croles/') @login_required @permission_requeired(CMSPersmission.ALL_PERMISSION) def croles(): return render_template('cms/croles.html') ``` 為了防止跨越權限訪問，還需要做一層驗證 ``` # 權限驗證 def permission_requeired(permission): def outter(func): @wraps(func) def inner(*args,**kwargs): user = g.cms_user # 判斷用戶是否具有訪問權限 if user.has_permission(permission): return func(*args,**kwargs) else: return redirect(url_for('cms.index')) return inner return outter ``` 這里所進行的驗證，是基于原來的規定的功能的二進制碼，進行與或運算判斷是否具有相應的訪問權限