Comments are only visible to users with admin rights or who have the new
permission level 'export'.
Also opportunisitally reduced code duplication in script.js
In order to get the @verify_admin decorator to work properly,
two things are required:
- The decorator must be placed after the @app.route decorator, otherwise it
is bypassed by flask which will use the result of @app.route for all calls
regardless of any previous decorators
- The decorator function must itself use an @wraps deorator for the wrapped
function, otherwise flask will crash if the decorator is used
more than once.
The config item required_entitlement has been replaced by two new items:
- access_entitlement: grants access to the site
- admin_entitlement: grants edit rights on the site
