code: def allow_user(user):
      
      def processor(action, argument):
          db.session.add(
              ActionUsers.allow(action, argument=argument, user_id=user.id)
          )
      return processor
docs: Allow a user identified by an email address.