Admin Routes - SWL Library Management System

Admin routes provide administrative functionality for managing users, loans, catalog items, and physical inventory instances.

User Management

GET /users

Display paginated list of all users. Blueprint: admin
Methods: GET
Template: admin/users.html
Login Required: Yes
Roles: admin

Query Parameters

page

int

default:"1"

Page number for pagination

Response Data

users

Pagination

Paginated user list (10 per page)

form

AdminUserForm

Form for creating new users

import_form

ImportForm

Form for bulk user import

edit_forms

dict

Dictionary mapping user IDs to EditUserForm instances

Source Reference: app/admin/routes.py:15

GET /users/search

Search users by name or document ID. Blueprint: admin
Methods: GET
Template: admin/users.html
Login Required: Yes
Roles: admin

Query Parameters

str

Search term (searches full_name and document_id)

page

int

default:"1"

Page number for pagination

Example

query = User.query
if search:
    query = query.filter(
        or_(
            User.full_name.ilike(f'%{search}%'),
            User.document_id.ilike(f'%{search}%'),
        )
    )
users_pagination = query.order_by(User.full_name).paginate(
    page=page, per_page=10, error_out=False
)

Source Reference: app/admin/routes.py:32

POST /users/create

Create a new user account. Blueprint: admin
Methods: POST
Login Required: Yes
Roles: admin

Form Fields

full_name

str

required

User’s full name

document_id

str

required

Unique document ID

str

required

Unique email address

phone

str

required

Phone number

role

str

required

User role: ‘cliente’, ‘premium’, ‘bibliotecario’, ‘admin’

program_name

str

Academic program (required only if role=‘cliente’)

password

str

required

Initial password

Validation

Document ID must be unique
Email must be unique
Password is hashed before storage

Source Reference: app/admin/routes.py:58

POST /users/edit/{id}

Update existing user information. Blueprint: admin
Methods: POST
Login Required: Yes
Roles: admin

URL Parameters

int

required

User ID to edit

Form Fields

full_name

str

required

Updated full name

phone

str

required

Updated phone number

role

str

required

Updated role

program_name

str

Updated program (if role=‘cliente’)

password

str

Optional: New password (leave blank to keep current)

Example

user = User.query.get_or_404(id)
form = EditUserForm()

if form.validate_on_submit():
    user.full_name = form.full_name.data
    user.phone = form.phone.data
    user.role = form.role.data
    user.program_name = form.program_name.data if form.role.data == 'cliente' else None

    # Optional password update
    if form.password.data:
        user.set_password(form.password.data)

    db.session.commit()
    flash(f'Usuario {user.full_name} actualizado.', 'success')

Source Reference: app/admin/routes.py:93

POST /users/delete/{id}

Delete a user account. Blueprint: admin
Methods: POST
Login Required: Yes
Roles: admin

URL Parameters

int

required

User ID to delete

Business Rules

Cannot delete your own account
Cascading deletes handled by database relationships

Source Reference: app/admin/routes.py:122

Loan Management

GET /dashboard

Admin dashboard showing loan statistics and filtered loans. Blueprint: admin
Methods: GET
Template: admin/dashboard.html
Login Required: Yes
Roles: bibliotecario, admin

Query Parameters

status

str

default:"pendiente"

Filter loans by status: ‘pendiente’, ‘activo’, ‘devuelto’, ‘atrasado’

Response Data

loans

list[Loan]

Filtered loans ordered by request_date (descending)

stats

dict

Counts for each loan status:

pending: Count of pending loans
activo: Count of active loans
returned: Count of returned loans
atrasado: Count of overdue loans

top_items

list[tuple]

Top 5 most requested items with loan counts

Example

# Statistics query
top_items = db.session.query(
    Catalog.title_or_name,
    func.count(Loan.id).label('total')
).join(ItemInstance).join(Loan)\
 .group_by(Catalog.title_or_name)\
 .order_by(func.count(Loan.id).desc())\
 .limit(5).all()

# Status counts
pending_count = Loan.query.filter_by(status='pendiente').count()
activo_count = Loan.query.filter_by(status='activo').count()

Source Reference: app/admin/routes.py:134

POST /approve/{id}

Approve a pending loan request. Blueprint: admin
Methods: POST
Login Required: Yes
Roles: bibliotecario

URL Parameters

int

required

Loan ID to approve

Business Logic

Uses LoanService.approve_loan()
Only pending loans can be approved
Sets status to ‘activo’
Records approval timestamp

Example

success, msg = LoanService.approve_loan(id)

if success:
    flash(msg, 'success')
    return redirect(url_for('admin.admin_dashboard', status='activo'))
else:
    flash(msg, 'danger')
    return redirect(url_for('admin.admin_dashboard', status='pendiente'))

Source Reference: app/admin/routes.py:162

POST /loan/{loan_id}/return

Process the return of a loaned item. Blueprint: admin
Methods: POST
Login Required: Yes
Roles: admin, bibliotecario

URL Parameters

loan_id

int

required

Loan ID to process return for

Business Logic

Freezes penalty amount for historical record
Sets status to ‘devuelto’
Records return timestamp
Releases instance back to inventory using InventoryService.release_instance()
Commits transaction or rolls back on error

Example

loan = Loan.query.get_or_404(loan_id)

if loan.status != 'devuelto':
    # 1. Freeze penalty
    loan.final_penalty = loan.penalty_fee
    loan.status = 'devuelto'
    loan.return_date = datetime.utcnow()
    
    # 2. Release inventory
    success, msg = InventoryService.release_instance(loan.instance_id)
    
    if success:
        db.session.commit()
        flash('Ítem devuelto y reingresado al inventario con éxito.', 'success')
    else:
        db.session.rollback()
        flash(f'Error al liberar inventario: {msg}', 'danger')

Source Reference: app/admin/routes.py:174

POST /reject/{id}

Reject a pending loan request. Blueprint: admin
Methods: POST
Login Required: Yes
Roles: bibliotecario

URL Parameters

int

required

Loan ID to reject

Business Logic

Only pending loans can be rejected
Sets status to ‘rechazado’
Releases reserved instance back to ‘disponible’
Adds rejection observation

Example

loan = Loan.query.get_or_404(id)
if loan.status == 'pendiente':
    loan.status = 'rechazado'
    loan.observation = 'Rechazado por el bibliotecario.'
    
    if loan.item_instance:
        loan.item_instance.status = 'disponible'

    db.session.commit()
    flash('Solicitud rechazada con éxito. Se liberó la reserva física.', 'success')
else:
    flash('Solo puedes rechazar solicitudes que estén pendientes.', 'warning')

Source Reference: app/admin/routes.py:197

Catalog Management

GET/POST /catalog

Manage catalog items (titles/names of items). Blueprint: admin
Methods: GET, POST
Template: admin/catalog.html
Login Required: Yes
Roles: bibliotecario, admin

Query Parameters

str

Search term for title_or_name and category

Form Fields (POST)

title_or_name

str

required

Item title or name

Example

form = CatalogForm()
if form.validate_on_submit():
    new_catalog_item = Catalog(
        title_or_name=form.title_or_name.data,
        category=form.category.data,
        author_or_brand=form.author_or_brand.data
    )
    db.session.add(new_catalog_item)
    db.session.commit()
    flash(f'Elemento de catálogo "{form.title_or_name.data}" creado.', 'success')

Source Reference: app/admin/routes.py:216

POST /catalog/delete/{id}

Delete a catalog item. Blueprint: admin
Methods: POST
Login Required: Yes
Roles: bibliotecario, admin

URL Parameters

int

required

Catalog ID to delete

Business Rules

Cannot delete if physical instances exist
Check catalog.total_count > 0

Source Reference: app/admin/routes.py:244

Instance Management

GET/POST /catalog/{catalog_id}/instances

Manage physical instances of a catalog item. Blueprint: admin
Methods: GET, POST
Template: admin/instances.html
Login Required: Yes
Roles: bibliotecario, admin

URL Parameters

catalog_id

int

required

Catalog ID to manage instances for

Form Fields (POST)

unique_code

str

required

Serial number or unique identifier (must be unique)

condition

str

required

Physical condition: ‘nuevo’, ‘bueno’, ‘regular’, ‘malo’

status

str

required

Status: ‘disponible’, ‘prestado’, ‘mantenimiento’, ‘perdido’

Example

if ItemInstance.query.filter_by(unique_code=unique_code).first():
    flash(f'El código/serial "{unique_code}" ya está registrado.', 'danger')
else:
    new_instance = ItemInstance(
        catalog_id=catalog_id,
        unique_code=unique_code,
        condition=condition,
        status=status,
    )
    db.session.add(new_instance)
    db.session.commit()
    flash(f'Instancia "{unique_code}" agregada correctamente.', 'success')

Source Reference: app/admin/routes.py:256

POST /instance/update_status/{instance_id}

Update the status of a physical instance. Blueprint: admin
Methods: POST
Login Required: Yes
Roles: bibliotecario, admin

URL Parameters

instance_id

int

required

Instance ID to update

Form Fields

status

str

required

New status: ‘disponible’, ‘mantenimiento’, ‘perdido’

Allowed Status Values

disponible: Item is available for loan
mantenimiento: Item is under maintenance
perdido: Item is lost

Note: Cannot manually set to ‘prestado’ - this is managed by loan system Source Reference: app/admin/routes.py:296

POST /instance/delete/{instance_id}

Delete a physical instance. Blueprint: admin
Methods: POST
Login Required: Yes
Roles: bibliotecario, admin

URL Parameters

instance_id

int

required

Instance ID to delete

Business Rules

Cannot delete if instance has active loans (pendiente, activo, atrasado)
Checks using instance.loans.filter()

Example

instance = ItemInstance.query.get_or_404(instance_id)
catalog_id = instance.catalog_id

if instance.loans.filter(Loan.status.in_(['pendiente', 'activo', 'atrasado'])).first():
    flash('No puedes eliminar una instancia en préstamo activo.', 'danger')
else:
    db.session.delete(instance)
    db.session.commit()
    flash(f'Instancia {instance.unique_code} eliminada.', 'success')

Source Reference: app/admin/routes.py:322

Models

Services

Routes

​User Management

​GET /users

​Query Parameters

​Response Data

​GET /users/search

​Query Parameters

​Example

​POST /users/create

​Form Fields

​Validation

​POST /users/edit/{id}

​URL Parameters

​Form Fields

​Example

​POST /users/delete/{id}

​URL Parameters

​Business Rules

​Loan Management

​GET /dashboard

​Query Parameters

​Response Data

​Example

​POST /approve/{id}

​URL Parameters

​Business Logic

​Example

​POST /loan/{loan_id}/return

​URL Parameters

​Business Logic

​Example

​POST /reject/{id}

​URL Parameters

​Business Logic

​Example

​Catalog Management

​GET/POST /catalog

​Query Parameters

​Form Fields (POST)

​Example

​POST /catalog/delete/{id}

​URL Parameters

​Business Rules

​Instance Management

​GET/POST /catalog/{catalog_id}/instances

​URL Parameters

​Form Fields (POST)

​Example

​POST /instance/update_status/{instance_id}

​URL Parameters

​Form Fields

​Allowed Status Values

​POST /instance/delete/{instance_id}

​URL Parameters

​Business Rules

​Example

User Management

GET /users

Query Parameters

Response Data

GET /users/search

Query Parameters

Example

POST /users/create

Form Fields

Validation

POST /users/edit/{id}

URL Parameters

Form Fields

Example

POST /users/delete/{id}

URL Parameters

Business Rules

Loan Management

GET /dashboard

Query Parameters

Response Data

Example

POST /approve/{id}

URL Parameters

Business Logic

Example

POST /loan/{loan_id}/return

URL Parameters

Business Logic

Example

POST /reject/{id}

URL Parameters

Business Logic

Example

Catalog Management

GET/POST /catalog

Query Parameters

Form Fields (POST)

Example

POST /catalog/delete/{id}

URL Parameters

Business Rules

Instance Management

GET/POST /catalog/{catalog_id}/instances

URL Parameters

Form Fields (POST)

Example

POST /instance/update_status/{instance_id}

URL Parameters

Form Fields

Allowed Status Values

POST /instance/delete/{instance_id}

URL Parameters

Business Rules

Example