1 files changed, 22 insertions, 0 deletions
diff --git a/opendc-web/opendc-web-api/opendc/api/v2/prefabs/authorizations/endpoint.py b/opendc-web/opendc-web-api/opendc/api/v2/prefabs/authorizations/endpoint.py
new file mode 100644
index 00000000..0d9ad5cd
--- /dev/null
+++ b/opendc-web/opendc-web-api/opendc/api/v2/prefabs/authorizations/endpoint.py
@@ -0,0 +1,22 @@
+from opendc.models.prefab import Prefab
+from opendc.util.database import DB
+from opendc.models.user import User
+from opendc.util.rest import Response
+
+
+def GET(request):
+    """Return all prefabs the user is authorized to access"""
+
+    user = User.from_google_id(request.google_id)
+
+    user.check_exists()
+
+    own_prefabs = DB.fetch_all({'authorId': user.get_id()}, Prefab.collection_name)
+    public_prefabs = DB.fetch_all({'visibility': 'public'}, Prefab.collection_name)
+
+    authorizations = {"authorizations": []}
+
+    authorizations["authorizations"].append(own_prefabs)
+    authorizations["authorizations"].append(public_prefabs)
+
+    return Response(200, 'Successfully fetched authorizations.', authorizations)