3 files changed, 180 insertions, 3 deletions
diff --git a/web-server/opendc/api/v2/prefabs/endpoint.py b/web-server/opendc/api/v2/prefabs/endpoint.py
index d7e23450..da422875 100644
--- a/web-server/opendc/api/v2/prefabs/endpoint.py
+++ b/web-server/opendc/api/v2/prefabs/endpoint.py
@@ -14,10 +14,10 @@ def POST(request):
     prefab = Prefab(request.params_body['prefab'])
     prefab.set_property('datetimeCreated', Database.datetime_to_string(datetime.now()))
     prefab.set_property('datetimeLastEdited', Database.datetime_to_string(datetime.now()))
-    prefab.insert()
 
     user = User.from_google_id(request.google_id)
-    user.obj['authorizations'].append({'prefabId': prefab.get_id(), 'authorizationLevel': 'OWN'})
-    user.update()
+    prefab.set_property('userId', user.get_id)
+
+    prefab.insert()
 
     return Response(200, 'Successfully created prefab.', prefab.obj)
diff --git a/web-server/opendc/api/v2/prefabs/prefabId/endpoint.py b/web-server/opendc/api/v2/prefabs/prefabId/endpoint.py
index e69de29b..c30565d0 100644
--- a/web-server/opendc/api/v2/prefabs/prefabId/endpoint.py
+++ b/web-server/opendc/api/v2/prefabs/prefabId/endpoint.py
@@ -0,0 +1,58 @@
+from datetime import datetime
+
+from opendc.models.experiment import Experiment
+from opendc.models.prefab import Prefab
+from opendc.models.topology import Topology
+from opendc.models.user import User
+from opendc.util.database import Database
+from opendc.util.rest import Response
+
+
+def GET(request):
+    """Get this Prefab."""
+
+    request.check_required_parameters(path={'prefabId': 'string'})
+
+    prefab = Prefab.from_id(request.params_path['prefabId'])
+
+    prefab.check_exists()
+    prefab.check_user_access(request.google_id, False)
+
+    return Response(200, 'Successfully retrieved prefab', prefab.obj)
+
+
+def PUT(request):
+    """Update a prefab's name."""
+
+    request.check_required_parameters(body={'prefab': {'name': 'name'}}, path={'prefabId': 'string'})
+
+    prefab = Prefab.from_id(request.params_path['prefabId'])
+
+    prefab.check_exists()
+    prefab.check_user_access(request.google_id, True)
+
+    prefab.set_property('name', request.params_body['prefab']['name'])
+    prefab.set_property('datetime_last_edited', Database.datetime_to_string(datetime.now()))
+    prefab.update()
+
+    return Response(200, 'Successfully updated prefab.', prefab.obj)
+
+
+def DELETE(request):
+    """Delete this Prefab."""
+
+    request.check_required_parameters(path={'prefabId': 'string'})
+
+    prefab = Prefab.from_id(request.params_path['prefabId'])
+
+    prefab.check_exists()
+    prefab.check_user_access(request.google_id, True)
+
+    user = User.from_google_id(request.google_id)
+    user.obj['authorizations'] = list(
+        filter(lambda x: str(x['prefabId']) != request.params_path['prefabId'], user.obj['authorizations']))
+    user.update()
+
+    old_object = prefab.delete()
+
+    return Response(200, 'Successfully deleted prefab.', old_object)
diff --git a/web-server/opendc/api/v2/prefabs/prefabId/test_endpoint.py b/web-server/opendc/api/v2/prefabs/prefabId/test_endpoint.py
index e69de29b..c34bf6fa 100644
--- a/web-server/opendc/api/v2/prefabs/prefabId/test_endpoint.py
+++ b/web-server/opendc/api/v2/prefabs/prefabId/test_endpoint.py
@@ -0,0 +1,119 @@
+from opendc.util.database import DB
+
+
+def test_get_prefab_non_existing(client, mocker):
+    mocker.patch.object(DB, 'fetch_one', return_value=None)
+    assert '404' in client.get('/api/v2/prefabs/1').status
+
+
+def test_get_prefab_no_authorizations(client, mocker):
+    mocker.patch.object(DB, 'fetch_one', return_value={'authorizations': []})
+    res = client.get('/api/v2/prefabs/1')
+    assert '403' in res.status
+
+
+def test_get_prefab_not_authorized(client, mocker):
+    mocker.patch.object(DB,
+                        'fetch_one',
+                        return_value={
+                            '_id': '1',
+                            'authorizations': [{
+                                'prefabId': '2',
+                                'authorizationLevel': 'OWN'
+                            }]
+                        })
+    res = client.get('/api/v2/prefabs/1')
+    assert '403' in res.status
+
+
+def test_get_prefab(client, mocker):
+    mocker.patch.object(DB,
+                        'fetch_one',
+                        return_value={
+                            '_id': '1',
+                            'authorizations': [{
+                                'prefabId': '1',
+                                'authorizationLevel': 'EDIT'
+                            }]
+                        })
+    res = client.get('/api/v2/prefabs/1')
+    assert '200' in res.status
+
+
+def test_update_prefab_missing_parameter(client):
+    assert '400' in client.put('/api/v2/prefabs/1').status
+
+
+def test_update_prefab_non_existing(client, mocker):
+    mocker.patch.object(DB, 'fetch_one', return_value=None)
+    assert '404' in client.put('/api/v2/prefabs/1', json={'prefab': {'name': 'S'}}).status
+
+
+def test_update_prefab_not_authorized(client, mocker):
+    mocker.patch.object(DB,
+                        'fetch_one',
+                        return_value={
+                            '_id': '1',
+                            'authorizations': [{
+                                'prefabId': '1',
+                                'authorizationLevel': 'VIEW'
+                            }]
+                        })
+    mocker.patch.object(DB, 'update', return_value={})
+    assert '403' in client.put('/api/v2/prefabs/1', json={'prefab': {'name': 'S'}}).status
+
+
+def test_update_prefab(client, mocker):
+    mocker.patch.object(DB,
+                        'fetch_one',
+                        return_value={
+                            '_id': '1',
+                            'authorizations': [{
+                                'prefabId': '1',
+                                'authorizationLevel': 'OWN'
+                            }]
+                        })
+    mocker.patch.object(DB, 'update', return_value={})
+
+    res = client.put('/api/v2/prefabs/1', json={'prefab': {'name': 'S'}})
+    assert '200' in res.status
+
+
+def test_delete_prefab_non_existing(client, mocker):
+    mocker.patch.object(DB, 'fetch_one', return_value=None)
+    assert '404' in client.delete('/api/v2/prefabs/1').status
+
+
+def test_delete_prefab_different_user(client, mocker):
+    mocker.patch.object(DB,
+                        'fetch_one',
+                        return_value={
+                            '_id': '1',
+                            'googleId': 'other_test',
+                            'authorizations': [{
+                                'prefabId': '1',
+                                'authorizationLevel': 'VIEW'
+                            }],
+                            'topologyIds': []
+                        })
+    mocker.patch.object(DB, 'delete_one', return_value=None)
+    assert '403' in client.delete('/api/v2/prefabs/1').status
+
+
+def test_delete_prefab(client, mocker):
+    mocker.patch.object(DB,
+                        'fetch_one',
+                        return_value={
+                            '_id': '1',
+                            'googleId': 'test',
+                            'authorizations': [{
+                                'prefabId': '1',
+                                'authorizationLevel': 'OWN'
+                            }],
+                            'topologyIds': [],
+                            'experimentIds': [],
+                        })
+    mocker.patch.object(DB, 'update', return_value=None)
+    mocker.patch.object(DB, 'delete_one', return_value={'googleId': 'test'})
+    res = client.delete('/api/v2/prefabs/1')
+    assert '200' in res.status