如何才能使此功能适用于所有员工角色？

from flask import Flask, request, abort
from functools import wraps

app = Flask(__name__)

# 模拟用户角色和权限
roles = {
    'admin': ['view', 'edit', 'delete'],
    'user': ['view']
}

def requires_permission(permission):
    def decorator(f):
        @wraps(f)
        def decorated_function(*args, **kwargs):
            user_role = request.headers.get('User-Role')
            if user_role not in roles or permission not in roles[user_role]:
                abort(403)  # Forbidden
            return f(*args, **kwargs)
        return decorated_function
    return decorator

@app.route('/resource')
@requires_permission('view')
def view_resource():
    return "Resource content"

if __name__ == '__main__':
    app.run(debug=True)