diff options
Diffstat (limited to 'moon_manager/moon_manager/api/data.py')
| -rw-r--r-- | moon_manager/moon_manager/api/data.py | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/moon_manager/moon_manager/api/data.py b/moon_manager/moon_manager/api/data.py index 05e30236..4b22f9dc 100644 --- a/moon_manager/moon_manager/api/data.py +++ b/moon_manager/moon_manager/api/data.py @@ -12,6 +12,7 @@ from flask_restful import Resource import logging from python_moonutilities.security_functions import check_auth from python_moondb.core import PolicyManager +from python_moonutilities.security_functions import validate_input __version__ = "4.3.2" @@ -31,6 +32,7 @@ class SubjectData(Resource): "<string:data_id>", ) + @validate_input("get", kwargs_state=[True, False, False, False]) @check_auth def get(self, uuid, category_id=None, data_id=None, user_id=None): """Retrieve all subject categories or a specific one if data_id is given @@ -63,6 +65,7 @@ class SubjectData(Resource): "error": str(e)}, 500 return {"subject_data": data} + @validate_input("post", kwargs_state=[True, True, False, False], body_state=[True, False]) @check_auth def post(self, uuid, category_id=None, data_id=None, user_id=None): """Create or update a subject. @@ -98,6 +101,7 @@ class SubjectData(Resource): "error": str(e)}, 500 return {"subject_data": data} + @validate_input("delete", kwargs_state=[True, False, False, False]) @check_auth def delete(self, uuid, category_id=None, data_id=None, user_id=None): """Delete a subject for a given policy @@ -136,6 +140,7 @@ class ObjectData(Resource): "<string:data_id>", ) + @validate_input("get", kwargs_state=[True, False, False, False]) @check_auth def get(self, uuid, category_id=None, data_id=None, user_id=None): """Retrieve all object categories or a specific one if sid is given @@ -168,6 +173,7 @@ class ObjectData(Resource): "error": str(e)}, 500 return {"object_data": data} + @validate_input("post", kwargs_state=[True, True, False, False], body_state=[True, False]) @check_auth def post(self, uuid, category_id=None, data_id=None, user_id=None): """Create or update a object. @@ -203,6 +209,7 @@ class ObjectData(Resource): "error": str(e)}, 500 return {"object_data": data} + @validate_input("delete", kwargs_state=[True, False, False, False]) @check_auth def delete(self, uuid, category_id=None, data_id=None, user_id=None): """Delete a object for a given policy @@ -241,6 +248,7 @@ class ActionData(Resource): "<string:data_id>", ) + @validate_input("get", kwargs_state=[True, False, False, False]) @check_auth def get(self, uuid, category_id=None, data_id=None, user_id=None): """Retrieve all action categories or a specific one if sid is given @@ -273,6 +281,7 @@ class ActionData(Resource): "error": str(e)}, 500 return {"action_data": data} + @validate_input("post", kwargs_state=[True, True, False, False], body_state=[True, False]) @check_auth def post(self, uuid, category_id=None, data_id=None, user_id=None): """Create or update a action. @@ -308,6 +317,7 @@ class ActionData(Resource): "error": str(e)}, 500 return {"action_data": data} + @validate_input("delete", kwargs_state=[True, False, False, False]) @check_auth def delete(self, uuid, category_id=None, data_id=None, user_id=None): """Delete a action for a given policy |