CMSシステムのロール権限管理機能をPythonで書く方法

from flask import Flask, request
from flask_sqlalchemy import SQLAlchemy

app = Flask(__name__)
app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///cms.db'
db = SQLAlchemy(app)

class Role(db.Model):
    id = db.Column(db.Integer, primary_key=True)
    name = db.Column(db.String(50), unique=True)

class Permission(db.Model):
    id = db.Column(db.Integer, primary_key=True)
    name = db.Column(db.String(50), unique=True)

class RolePermission(db.Model):
    id = db.Column(db.Integer, primary_key=True)
    role_id = db.Column(db.Integer, db.ForeignKey('role.id'))
    permission_id = db.Column(db.Integer, db.ForeignKey('permission.id'))

@app.route('/role', methods=['POST'])
def create_role():
    name = request.form['name']
    role = Role(name=name)
    db.session.add(role)
    db.session.commit()
    return 'Role created'

@app.route('/permission', methods=['POST'])
def create_permission():
    name = request.form['name']
    permission = Permission(name=name)
    db.session.add(permission)
    db.session.commit()
    return 'Permission created'

@app.route('/role_permission', methods=['POST'])
def create_role_permission():
    role_id = request.form['role_id']
    permission_id = request.form['permission_id']
    role_permission = RolePermission(role_id=role_id, permission_id=permission_id)
    db.session.add(role_permission)
    db.session.commit()
    return 'Role permission created'

if __name__ == '__main__':
    db.create_all()
    app.run()

POST /role

name=admin

POST /permission

name=edit_article

POST /role_permission

role_id=1
permission_id=1