Simple permission control in Flask.