+@app.route('/admin/votes/list')
+def admin_votes():
+ if not session.get('user').get('is_admin'):
+ abort(401)
+ votes = query_db('select *, roles.name as rolename from votes join roles on roles.id=votes.id_role order by id desc')
+ return render_template('admin_votes.html', votes=votes)
+
+@app.route('/admin/votes/add', methods=['GET', 'POST'])
+def admin_vote_add():