role.py

import cyclone.web
import functools

def requiredrole(role):
    """@requiredrole(role_name)
    Example:

    class Secret(BaseHandler):
        @requiredrole("admin")
        @cyclone.web.authenticated
        def get(self):
            self.render('secret.html')
    """
    def decorator(method):
        @functools.wraps(method)
        def wrapper(self,*args,**kwargs):
            if self.current_user and self.current_user['role'] != role:
                 raise cyclone.web.HTTPError(403)
            else:
                return method(self,*args,**kwargs)
        return wrapper
    return decorator