I think we should do something that will avoid explicit checks everywhere.. Does flask support role based Views?