05/06 Modify Director menu

app/routes/auth.py

@@ -111,7 +111,7 @@ def profile():
 
 @bp.route('/users')
 @login_required
-@supervisor_required
+@admin_required
 def list_users():
     # Exclude customer accounts — those are managed exclusively via /customers
     users = (
@@ -127,7 +127,7 @@ def list_users():
 
 @bp.route('/users/new', methods=['GET', 'POST'])
 @login_required
-@supervisor_required
+@admin_required
 def create_user():
     form = UserForm()
 
@@ -159,7 +159,7 @@ def create_user():
 
 @bp.route('/users/<int:user_id>/edit', methods=['GET', 'POST'])
 @login_required
-@supervisor_required
+@admin_required
 def edit_user(user_id):
     user = db.session.get(User, user_id)
     if user is None:
@@ -196,7 +196,7 @@ def edit_user(user_id):
 
 @bp.route('/users/<int:user_id>/delete', methods=['POST'])
 @login_required
-@supervisor_required
+@admin_required
 def delete_user(user_id):
     user = db.session.get(User, user_id)
     if user is None:
@@ -256,7 +256,7 @@ def delete_user(user_id):
 
 @bp.route('/users/<int:user_id>/toggle-active', methods=['POST'])
 @login_required
-@supervisor_required
+@admin_required
 def toggle_active(user_id):
     user = db.session.get(User, user_id)
     if user is None: