Protect Django views (and probably Flask too). Most logically, admins only shall be able to use them.