finish implementing Flask_Security_Too and finished dynamic navbar creation.

eveai_app/views/user_views.py

@@ -2,7 +2,7 @@
 import uuid
 from datetime import datetime as dt, timezone as tz
 from flask import request, redirect, url_for, flash, render_template, Blueprint, session
-from flask_security import hash_password, current_user
+from flask_security import hash_password, current_user, login_required, roles_required, roles_accepted
 
 from ..models.user import User, Tenant, Role, RolesUsers
 from ..extensions import db
@@ -13,6 +13,7 @@ user_bp = Blueprint('user_bp', __name__, url_prefix='/user')
 
 
 @user_bp.route('/tenant', methods=['GET', 'POST'])
+@roles_required('Super User')
 def tenant():
     if request.method == 'POST':
         # Handle the required attributes
@@ -65,6 +66,7 @@ def tenant():
 
 
 @user_bp.route('/tenant/<int:tenant_id>', methods=['GET', 'POST'])
+@roles_required('Super User')
 def edit_tenant(tenant_id):
     tenant = Tenant.query.get_or_404(tenant_id)  # This will return a 404 if no tenant is found
     form = TenantForm(obj=tenant)
@@ -80,6 +82,7 @@ def edit_tenant(tenant_id):
 
 
 @user_bp.route('/user', methods=['GET', 'POST'])
+@roles_accepted('Super User', 'Tenant Admin')
 def user():
     form = CreateUserForm()
     if form.validate_on_submit():
@@ -129,6 +132,7 @@ def user():
 
 
 @user_bp.route('/user/<int:user_id>', methods=['GET', 'POST'])
+@roles_accepted('Super User', 'Tenant Admin')
 def edit_user(user_id):
     user = User.query.get_or_404(user_id)  # This will return a 404 if no user is found
     form = EditUserForm(obj=user)
@@ -165,12 +169,14 @@ def edit_user(user_id):
 
 
 @user_bp.route('/select_tenant')
+@roles_required('Super User')
 def select_tenant():
     tenants = Tenant.query.all()  # Fetch all tenants from the database
     return render_template('user/select_tenant.html', tenants=tenants)
 
 
 @user_bp.route('/handle_tenant_selection', methods=['POST'])
+@roles_required('Super User')
 def handle_tenant_selection():
     tenant_id = request.form['tenant_id']
     session['tenant_id'] = request.form['tenant_id']
@@ -185,6 +191,7 @@ def handle_tenant_selection():
 
 
 @user_bp.route('/view_users/<tenant_id>')
+@roles_accepted('Super User', 'Tenant Admin')
 def view_users(tenant_id):
     print(tenant_id)
     tenant_id = int(tenant_id)
@@ -195,6 +202,7 @@ def view_users(tenant_id):
 
 
 @user_bp.route('/handle_user_action', methods=['POST'])
+@roles_accepted('Super User', 'Tenant Admin')
 def handle_user_action():
     user_id = request.form['user_id']
     action = request.form['action']