app/routes/admin.py

from flask import Blueprint, jsonify
from app.models import User
from app.decorators import roles_required

bp = Blueprint('admin', __name__, url_prefix='/admin')

@bp.route('/users', methods=['GET'])
@roles_required('admin')
def all_users():
    users = User.query.all()
    return jsonify([
        {"id": u.id, "email": u.email, "roles": [r.name for r in u.roles]}
        for u in users
    ])