def allow_remote_invocation(func, method='auto'):
 setattr(func, 'allow_rmi', method)
 return func

def allow_remote_invocation ( func , method = 'auto' ) : setattr ( func , 'allow_rmi' , method ) return func
all methods which shall be callable through a given ajax action must be decorated with @allowed_action .