docs: def check_permission(permission, hidden=True):
      """Check if permission is allowed.
  
      If permission fails then the connection is aborted.
  
      :param permission: The permission to check.
      :param hidden: Determine if a 404 error (``True``) or 401/403 error
          (``False``) should be returned if the permission is rejected (i.e.
          hide or reveal the existence of a particular object).
      """
      if permission is not None and not permission.can():
          if hidden:
              abort(404)
          else:
              if current_user.is_authenticated:
                  abort(403,
                        'You do not have a permission for this action')
              abort(401)