Implement portfolio endpoints

4 files changed, 214 insertions, 0 deletions

diff --git a/web-server/opendc/api/v2/portfolios/__init__.py b/web-server/opendc/api/v2/portfolios/__init__.py
new file mode 100644
index 00000000..e69de29b
--- /dev/null
+++ b/web-server/opendc/api/v2/portfolios/__init__.py
diff --git a/web-server/opendc/api/v2/portfolios/portfolioId/__init__.py b/web-server/opendc/api/v2/portfolios/portfolioId/__init__.py
new file mode 100644
index 00000000..e69de29b
--- /dev/null
+++ b/web-server/opendc/api/v2/portfolios/portfolioId/__init__.py
diff --git a/web-server/opendc/api/v2/portfolios/portfolioId/endpoint.py b/web-server/opendc/api/v2/portfolios/portfolioId/endpoint.py
new file mode 100644
index 00000000..0a50a526
--- /dev/null
+++ b/web-server/opendc/api/v2/portfolios/portfolioId/endpoint.py
@@ -0,0 +1,65 @@
+from opendc.models.portfolio import Portfolio
+from opendc.models.project import Project
+from opendc.util.rest import Response
+
+
+def GET(request):
+    """Get this Portfolio."""
+
+    request.check_required_parameters(path={'portfolioId': 'string'})
+
+    portfolio = Portfolio.from_id(request.params_path['portfolioId'])
+
+    portfolio.check_exists()
+    portfolio.check_user_access(request.google_id, False)
+
+    return Response(200, 'Successfully retrieved portfolio.', portfolio.obj)
+
+
+def PUT(request):
+    """Update this Portfolios name."""
+
+    request.check_required_parameters(path={'portfolioId': 'string'}, body={'portfolio': {
+        'name': 'string',
+        'targets': {
+            'enabledMetrics': 'list',
+            'repeatsPerScenario': 'int',
+        },
+    }})
+
+    portfolio = Portfolio.from_id(request.params_path['portfolioId'])
+
+    portfolio.check_exists()
+    portfolio.check_user_access(request.google_id, True)
+
+    portfolio.set_property('name',
+                           request.params_body['portfolio']['name'])
+    portfolio.set_property('targets.enabledMetrics',
+                           request.params_body['portfolio']['targets']['enabledMetrics'])
+    portfolio.set_property('targets.repeatsPerScenario',
+                           request.params_body['portfolio']['targets']['repeatsPerScenario'])
+
+    portfolio.update()
+
+    return Response(200, 'Successfully updated portfolio.', portfolio.obj)
+
+
+def DELETE(request):
+    """Delete this Portfolio."""
+
+    request.check_required_parameters(path={'portfolioId': 'string'})
+
+    portfolio = Portfolio.from_id(request.params_path['portfolioId'])
+
+    portfolio.check_exists()
+    portfolio.check_user_access(request.google_id, True)
+
+    project = Project.from_id(portfolio.obj['projectId'])
+    project.check_exists()
+    if request.params_path['portfolioId'] in project.obj['portfolioIds']:
+        project.obj['portfolioIds'].remove(request.params_path['portfolioId'])
+    project.update()
+
+    old_object = portfolio.delete()
+
+    return Response(200, 'Successfully deleted portfolio.', old_object)
diff --git a/web-server/opendc/api/v2/portfolios/portfolioId/test_endpoint.py b/web-server/opendc/api/v2/portfolios/portfolioId/test_endpoint.py
new file mode 100644
index 00000000..7ac346d4
--- /dev/null
+++ b/web-server/opendc/api/v2/portfolios/portfolioId/test_endpoint.py
@@ -0,0 +1,149 @@
+from opendc.util.database import DB
+
+
+def test_get_portfolio_non_existing(client, mocker):
+    mocker.patch.object(DB, 'fetch_one', return_value=None)
+    assert '404' in client.get('/api/v2/portfolios/1').status
+
+
+def test_get_portfolio_no_authorizations(client, mocker):
+    mocker.patch.object(DB, 'fetch_one', return_value={'projectId': '1', 'authorizations': []})
+    res = client.get('/api/v2/portfolios/1')
+    assert '403' in res.status
+
+
+def test_get_portfolio_not_authorized(client, mocker):
+    mocker.patch.object(DB,
+                        'fetch_one',
+                        return_value={
+                            'projectId': '1',
+                            '_id': '1',
+                            'authorizations': [{
+                                'projectId': '2',
+                                'authorizationLevel': 'OWN'
+                            }]
+                        })
+    res = client.get('/api/v2/portfolios/1')
+    assert '403' in res.status
+
+
+def test_get_portfolio(client, mocker):
+    mocker.patch.object(DB,
+                        'fetch_one',
+                        return_value={
+                            'projectId': '1',
+                            '_id': '1',
+                            'authorizations': [{
+                                'projectId': '1',
+                                'authorizationLevel': 'EDIT'
+                            }]
+                        })
+    res = client.get('/api/v2/portfolios/1')
+    assert '200' in res.status
+
+
+def test_update_portfolio_missing_parameter(client):
+    assert '400' in client.put('/api/v2/portfolios/1').status
+
+
+def test_update_portfolio_non_existing(client, mocker):
+    mocker.patch.object(DB, 'fetch_one', return_value=None)
+    assert '404' in client.put('/api/v2/portfolios/1', json={
+        'portfolio': {
+            'name': 'test',
+            'targets': {
+                'enabledMetrics': ['test'],
+                'repeatsPerScenario': 2
+            }
+        }
+    }).status
+
+
+def test_update_portfolio_not_authorized(client, mocker):
+    mocker.patch.object(DB,
+                        'fetch_one',
+                        return_value={
+                            '_id': '1',
+                            'projectId': '1',
+                            'authorizations': [{
+                                'projectId': '1',
+                                'authorizationLevel': 'VIEW'
+                            }]
+                        })
+    mocker.patch.object(DB, 'update', return_value={})
+    assert '403' in client.put('/api/v2/portfolios/1', json={
+        'portfolio': {
+            'name': 'test',
+            'targets': {
+                'enabledMetrics': ['test'],
+                'repeatsPerScenario': 2
+            }
+        }
+    }).status
+
+
+def test_update_portfolio(client, mocker):
+    mocker.patch.object(DB,
+                        'fetch_one',
+                        return_value={
+                            '_id': '1',
+                            'projectId': '1',
+                            'authorizations': [{
+                                'projectId': '1',
+                                'authorizationLevel': 'OWN'
+                            }],
+                            'targets': {
+                                'enabledMetrics': [],
+                                'repeatsPerScenario': 1
+                            }
+                        })
+    mocker.patch.object(DB, 'update', return_value={})
+
+    res = client.put('/api/v2/portfolios/1', json={'portfolio': {
+        'name': 'test',
+        'targets': {
+            'enabledMetrics': ['test'],
+            'repeatsPerScenario': 2
+        }
+    }})
+    assert '200' in res.status
+
+
+def test_delete_project_non_existing(client, mocker):
+    mocker.patch.object(DB, 'fetch_one', return_value=None)
+    assert '404' in client.delete('/api/v2/portfolios/1').status
+
+
+def test_delete_project_different_user(client, mocker):
+    mocker.patch.object(DB,
+                        'fetch_one',
+                        return_value={
+                            '_id': '1',
+                            'projectId': '1',
+                            'googleId': 'other_test',
+                            'authorizations': [{
+                                'projectId': '1',
+                                'authorizationLevel': 'VIEW'
+                            }]
+                        })
+    mocker.patch.object(DB, 'delete_one', return_value=None)
+    assert '403' in client.delete('/api/v2/portfolios/1').status
+
+
+def test_delete_project(client, mocker):
+    mocker.patch.object(DB,
+                        'fetch_one',
+                        return_value={
+                            '_id': '1',
+                            'projectId': '1',
+                            'googleId': 'test',
+                            'portfolioIds': ['1'],
+                            'authorizations': [{
+                                'projectId': '1',
+                                'authorizationLevel': 'OWN'
+                            }]
+                        })
+    mocker.patch.object(DB, 'delete_one', return_value={})
+    mocker.patch.object(DB, 'update', return_value=None)
+    res = client.delete('/api/v2/portfolios/1')
+    assert '200' in res.status