Add new custom API endpoint export/person/generic restricted to secretariat use

 - Legacy-Id: 15263

Author: rpcross

ietf/api/urls.py

@@ -20,7 +20,8 @@
     url(r'^meeting/session/video/url$', meeting_views.api_set_session_video_url),
     url(r'^submit/?$', submit_views.api_submit),
     url(r'^iesg/position', views_ballot.api_set_position),
-    url(r'^export/person/$', api_views.PersonExportView.as_view()), 
+    url(r'^export/person/$', api_views.PersonExportView.as_view()),
+    url(r'^export/person/generic', api_views.GenericPersonExportView.as_view()),
 ]
 
 # Additional (standard) Tastypie endpoints

ietf/api/views.py

@@ -11,6 +11,7 @@
 from django.shortcuts import render, get_object_or_404
 from django.urls import reverse
 from django.utils.decorators import method_decorator
+from django.views.decorators.csrf import csrf_exempt
 from django.views.decorators.gzip import gzip_page
 from django.views.generic.detail import DetailView
 
@@ -21,9 +22,12 @@
 
 import debug                            # pyflakes:ignore
 
-from ietf.person.models import Person
+from ietf.person.models import Person, Email
 from ietf.api import _api_list
 from ietf.api.serializer import JsonExportMixin
+from ietf.utils.decorators import require_api_key
+from ietf.ietfauth.utils import role_required
+
 
 def top_level(request):
     available_resources = {}
@@ -73,3 +77,23 @@ def get(self, request):
             'user', 'user__communitylist', ]
         return self.json_view(request, filter={'id':person.id}, expand=expand)
 
+
+@method_decorator((csrf_exempt, require_api_key, role_required('Secretariat')), name='dispatch')
+class GenericPersonExportView(DetailView, JsonExportMixin):
+    model = Person
+
+    def err(self, code, text):
+        return HttpResponse(text, status=code, content_type='text/plain')
+
+    def post(self, request):
+        if 'email' not in request.POST:
+            return self.err(400, "Missing email parameter")
+        email_address = request.POST.get('email')
+        try:
+            email = Email.objects.get(address=email_address)
+        except Email.DoesNotExist:
+            return self.err(404, "Email not found '%s'" % (email_address, ))
+        person = email.person
+        expand = ['user']
+        return self.json_view(request, filter={'id': person.id}, expand=expand)
+

ietf/person/models.py

@@ -293,6 +293,7 @@ def salt():
 # Manual maintenance: List all endpoints that use @require_api_key here
 PERSON_API_KEY_ENDPOINTS = [
     ("/api/iesg/position", "/api/iesg/position"),
+    ("/api/export/person/generic", "/api/export/person/generic"),
     ("/api/meeting/session/video/url", "/api/meeting/session/video/url"),
 ]