Refactored code responsible for finding user in database

api/utils.py

@@ -19,6 +19,14 @@ def validate_access(owner_id, message='Access denied.'):
         abort(403, message)
 
 
+def get_user_or_404(user_id):
+    "Get user from database or abort 404"
+    user = db.session.get(User, user_id)
+    if user is None:
+        abort(404, "User not found")
+    return user
+
+
 def init_db():
     """Create default admin account if database is empty"""
     with db.session.begin():