@@ -2847,6 +2847,7 @@ def delete_user(user_id):
return redirect(url_for("list_users"))
@app.route("/admin/receipts/", defaults={'id': 'all'})
@app.route("/admin/receipts/<id>")
@login_required
@admin_required
The note is not visible to the blocked user.