应用级安全管控怎么创建

from flask import Flask, request, jsonify
from functools import wraps

app = Flask(__name__)

# 模拟用户数据库
users = {
    'admin': {'password': 'admin123', 'role': 'admin'},
    'user': {'password': 'user123', 'role': 'user'}
}

def require_role(role):
    def decorator(f):
        @wraps(f)
        def decorated_function(*args, **kwargs):
            auth = request.authorization
            if not auth or auth.username not in users or users[auth.username]['password'] != auth.password:
                return jsonify({'message': 'Authentication required'}), 401
            if users[auth.username]['role'] != role:
                return jsonify({'message': 'Permission denied'}), 403
            return f(*args, **kwargs)
        return decorated_function
    return decorator

@app.route('/admin')
@require_role('admin')
def admin_only():
    return jsonify({'message': 'Welcome, Admin!'})

@app.route('/user')
@require_role('user')
def user_only():
    return jsonify({'message': 'Welcome, User!'})

if __name__ == '__main__':
    app.run(debug=True)