def requires_permission(permission):
    def decorator(function):
        def decorated_function(*args, **kwargs):
            if not current_user.is_authenticated:
                return redirect('/auth/login')
            elif not getattr(current_user.permissions, permission):
                return "you need to be an admin", 401
            else:
                return function(*args, **kwargs)
        return decorated_function
    return decorator

@bp.route('/')
@requires_permission('admin')
def dashboard(company=None):
    return "Hello, World!"

return redirect(url_for('main.dashboard', company = company))