A rule-based permissions module for Flask