require_privilege view decorator
protect the question_save_flags view
template variable: current_user_is_privileged