aboutsummaryrefslogtreecommitdiffstats
path: root/moon_manager/moon_manager/api/assignments.py
diff options
context:
space:
mode:
authorahmed.helmy <ahmad.helmy@orange.com>2018-04-05 15:41:37 +0200
committerDuval Thomas <thomas.duval@orange.com>2018-05-09 11:27:35 +0200
commit5dffe7e0889dd76885d313c1d44a4b389f4b8667 (patch)
tree6ff2f953ee16392bf6c0914744af258d61a237fa /moon_manager/moon_manager/api/assignments.py
parent1c249823b9a15d4dd3e2e5eae90c09131bc7f09b (diff)
continue integrating validation
Change-Id: Ifbda169affd649f9125581ac5b688b509d1f0d82 Signed-off-by: ahmed.helmy <ahmad.helmy@orange.com>
Diffstat (limited to 'moon_manager/moon_manager/api/assignments.py')
-rw-r--r--moon_manager/moon_manager/api/assignments.py10
1 files changed, 10 insertions, 0 deletions
diff --git a/moon_manager/moon_manager/api/assignments.py b/moon_manager/moon_manager/api/assignments.py
index 0b2cd20b..2ff9e218 100644
--- a/moon_manager/moon_manager/api/assignments.py
+++ b/moon_manager/moon_manager/api/assignments.py
@@ -12,6 +12,7 @@ from flask_restful import Resource
import logging
from python_moonutilities.security_functions import check_auth
from python_moondb.core import PolicyManager
+from python_moonutilities.security_functions import validate_input
__version__ = "4.3.2"
@@ -31,6 +32,7 @@ class SubjectAssignments(Resource):
"/policies/<string:uuid>/subject_assignments/<string:perimeter_id>/<string:category_id>/<string:data_id>",
)
+ @validate_input("get", kwargs_state=[True, False, False,False,False])
@check_auth
def get(self, uuid=None, perimeter_id=None, category_id=None,
data_id=None, user_id=None):
@@ -61,6 +63,7 @@ class SubjectAssignments(Resource):
"error": str(e)}, 500
return {"subject_assignments": data}
+ @validate_input("post", kwargs_state=[True, False, False, False, False], body_state=[True, True, True])
@check_auth
def post(self, uuid=None, perimeter_id=None, category_id=None,
data_id=None, user_id=None):
@@ -100,6 +103,7 @@ class SubjectAssignments(Resource):
"error": str(e)}, 500
return {"subject_assignments": data}
+ @validate_input("delete", kwargs_state=[True, True, True, True, False])
@check_auth
def delete(self, uuid=None, perimeter_id=None, category_id=None,
data_id=None, user_id=None):
@@ -141,6 +145,7 @@ class ObjectAssignments(Resource):
"/policies/<string:uuid>/object_assignments/<string:perimeter_id>/<string:category_id>/<string:data_id>",
)
+ @validate_input("get", kwargs_state=[True, False, False,False,False])
@check_auth
def get(self, uuid=None, perimeter_id=None, category_id=None,
data_id=None, user_id=None):
@@ -171,6 +176,7 @@ class ObjectAssignments(Resource):
"error": str(e)}, 500
return {"object_assignments": data}
+ @validate_input("post", kwargs_state=[True, False, False, False, False], body_state=[True, True, True])
@check_auth
def post(self, uuid=None, perimeter_id=None, category_id=None,
data_id=None, user_id=None):
@@ -210,6 +216,7 @@ class ObjectAssignments(Resource):
"error": str(e)}, 500
return {"object_assignments": data}
+ @validate_input("delete", kwargs_state=[True, True, True, True, False])
@check_auth
def delete(self, uuid=None, perimeter_id=None, category_id=None,
data_id=None, user_id=None):
@@ -251,6 +258,7 @@ class ActionAssignments(Resource):
"/policies/<string:uuid>/action_assignments/<string:perimeter_id>/<string:category_id>/<string:data_id>",
)
+ @validate_input("get", kwargs_state=[True, False, False,False,False])
@check_auth
def get(self, uuid=None, perimeter_id=None, category_id=None,
data_id=None, user_id=None):
@@ -281,6 +289,7 @@ class ActionAssignments(Resource):
"error": str(e)}, 500
return {"action_assignments": data}
+ @validate_input("post", kwargs_state=[True, False, False, False, False], body_state=[True, True, True])
@check_auth
def post(self, uuid=None, perimeter_id=None, category_id=None,
data_id=None, user_id=None):
@@ -320,6 +329,7 @@ class ActionAssignments(Resource):
"error": str(e)}, 500
return {"action_assignments": data}
+ @validate_input("delete", kwargs_state=[True, True, True, True, False])
@check_auth
def delete(self, uuid=None, perimeter_id=None, category_id=None,
data_id=None, user_id=None):