Decorators in modules/webutils.py
enforce access control.
@login_required
: Restricts routes to authenticated users by checkinguser_id
in the session.@project_access_required
: Restricts project data to its owner. Resolvesproject_name
from route params, query args, or JSON payloads.