1 files changed, 155 insertions, 0 deletions
diff --git a/src/mailman/rest/sub_moderation.py b/src/mailman/rest/sub_moderation.py
new file mode 100644
index 000000000..4f8cf2e8e
--- /dev/null
+++ b/src/mailman/rest/sub_moderation.py
@@ -0,0 +1,155 @@
+# Copyright (C) 2012-2015 by the Free Software Foundation, Inc.
+#
+# This file is part of GNU Mailman.
+#
+# GNU Mailman is free software: you can redistribute it and/or modify it under
+# the terms of the GNU General Public License as published by the Free
+# Software Foundation, either version 3 of the License, or (at your option)
+# any later version.
+#
+# GNU Mailman is distributed in the hope that it will be useful, but WITHOUT
+# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+# FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
+# more details.
+#
+# You should have received a copy of the GNU General Public License along with
+# GNU Mailman.  If not, see <http://www.gnu.org/licenses/>.
+
+"""REST API for held subscription requests."""
+
+__all__ = [
+    'SubscriptionRequests',
+    ]
+
+
+from mailman.interfaces.action import Action
+from mailman.interfaces.pending import IPendings
+from mailman.interfaces.registrar import IRegistrar
+from mailman.rest.helpers import (
+    CollectionMixin, bad_request, child, etag, no_content, not_found, okay)
+from mailman.rest.validator import Validator, enum_validator
+from zope.component import getUtility
+
+
+
+class _ModerationBase:
+    """Common base class."""
+
+    def _make_resource(self, token):
+        requests = IListRequests(self._mlist)
+        results = requests.get_request(request_id)
+        if results is None:
+            return None
+        key, data = results
+        resource = dict(key=key, request_id=request_id)
+        # Flatten the IRequest payload into the JSON representation.
+        resource.update(data)
+        # Check for a matching request type, and insert the type name into the
+        # resource.
+        request_type = RequestType[resource.pop('_request_type')]
+        if request_type not in expected_request_types:
+            return None
+        resource['type'] = request_type.name
+        # This key isn't what you think it is.  Usually, it's the Pendable
+        # record's row id, which isn't helpful at all.  If it's not there,
+        # that's fine too.
+        resource.pop('id', None)
+        return resource
+
+
+
+class IndividualRequest(_ModerationBase):
+    """Resource for moderating a membership change."""
+
+    def __init__(self, mlist, token):
+        self._mlist = mlist
+        self._registrar = IRegistrar(self._mlist)
+        self._token = token
+
+    def on_get(self, request, response):
+        try:
+            token, token_owner, member = self._registrar.confirm(self._token)
+        except LookupError:
+            not_found(response)
+            return
+        try:
+            request_id = int(self._request_id)
+        except ValueError:
+            bad_request(response)
+            return
+        resource = self._make_resource(request_id, MEMBERSHIP_CHANGE_REQUESTS)
+        if resource is None:
+            not_found(response)
+        else:
+            # Remove unnecessary keys.
+            del resource['key']
+            okay(response, etag(resource))
+
+    def on_post(self, request, response):
+        try:
+            validator = Validator(action=enum_validator(Action))
+            arguments = validator(request)
+        except ValueError as error:
+            bad_request(response, str(error))
+            return
+        requests = IListRequests(self._mlist)
+        try:
+            request_id = int(self._request_id)
+        except ValueError:
+            bad_request(response)
+            return
+        results = requests.get_request(request_id)
+        if results is None:
+            not_found(response)
+            return
+        key, data = results
+        try:
+            request_type = RequestType[data['_request_type']]
+        except ValueError:
+            bad_request(response)
+            return
+        if request_type is RequestType.subscription:
+            handle_subscription(self._mlist, request_id, **arguments)
+        elif request_type is RequestType.unsubscription:
+            handle_unsubscription(self._mlist, request_id, **arguments)
+        else:
+            bad_request(response)
+            return
+        no_content(response)
+
+
+class SubscriptionRequests(_ModerationBase, CollectionMixin):
+    """Resource for membership change requests."""
+
+    def __init__(self, mlist):
+        self._mlist = mlist
+
+    def _resource_as_dict(self, request):
+        """See `CollectionMixin`."""
+        resource = self._make_resource(request.id, MEMBERSHIP_CHANGE_REQUESTS)
+        # Remove unnecessary keys.
+        del resource['key']
+        return resource
+
+    def _get_collection(self, request):
+        # There's currently no better way to query the pendings database for
+        # all the entries that are associated with subscription holds on this
+        # mailing list.  Brute force for now.
+        items = []
+        for token, pendable in getUtility(IPendings):
+            token_owner = pendable.get('token_owner')
+            if token_owner is None:
+                continue
+            item = dict(token=token)
+            item.update(pendable)
+            items.append(item)
+        return items
+
+    def on_get(self, request, response):
+        """/lists/listname/requests"""
+        resource = self._make_collection(request)
+        okay(response, etag(resource))
+
+    @child(r'^(?P<token>[^/]+)')
+    def subscription(self, request, segments, **kw):
+        return IndividualRequest(self._mlist, kw['token'])