74 lines
2.3 KiB
Python
74 lines
2.3 KiB
Python
|
"""Engagement CRUD endpoints (flat, sprint 0)."""
|
||
|
|
|
||
|
|
from __future__ import annotations
|
||
|
|
|
||
|
|
from flask import Blueprint, abort, jsonify
|
||
|
|
from sqlalchemy import select
|
||
|
|
|
||
|
|
from mimic.api._helpers import jsonify_model, parse_body, parse_uuid
|
||
|
|
from mimic.db.models import Engagement
|
||
|
|
from mimic.db.types import EngagementStatus
|
||
|
|
from mimic.extensions import db
|
||
|
|
from mimic.rbac import Permission, require_perm
|
||
|
|
from mimic.schemas import EngagementCreate, EngagementRead, EngagementUpdate
|
||
|
|
|
||
|
|
bp = Blueprint("engagements", __name__)
|
||
|
|
|
||
|
|
|
||
|
|
@bp.get("")
|
||
|
|
@require_perm(Permission.ENGAGEMENT_READ)
|
||
|
|
def list_engagements():
|
||
|
|
stmt = select(Engagement).order_by(Engagement.created_at.desc())
|
||
|
|
rows = db.session.execute(stmt).scalars().all()
|
||
|
|
return jsonify([EngagementRead.model_validate(row).model_dump(mode="json") for row in rows])
|
||
|
|
|
||
|
|
|
||
|
|
@bp.post("")
|
||
|
|
@require_perm(Permission.ENGAGEMENT_CREATE)
|
||
|
|
def create_engagement():
|
||
|
|
payload = parse_body(EngagementCreate)
|
||
|
|
engagement = Engagement(
|
||
|
|
client_name=payload.client_name,
|
||
|
|
description=payload.description,
|
||
|
|
c2_type=payload.c2_type,
|
||
|
|
start_date=payload.start_date,
|
||
|
|
end_date=payload.end_date,
|
||
|
|
status=EngagementStatus.DRAFT,
|
||
|
|
)
|
||
|
|
db.session.add(engagement)
|
||
|
|
db.session.commit()
|
||
|
|
return jsonify_model(EngagementRead.model_validate(engagement), status=201)
|
||
|
|
|
||
|
|
|
||
|
|
@bp.get("/<eid>")
|
||
|
|
@require_perm(Permission.ENGAGEMENT_READ)
|
||
|
|
def get_engagement(eid: str):
|
||
|
|
engagement = db.session.get(Engagement, parse_uuid(eid))
|
||
|
|
if engagement is None:
|
||
|
|
abort(404)
|
||
|
|
return jsonify_model(EngagementRead.model_validate(engagement))
|
||
|
|
|
||
|
|
|
||
|
|
@bp.put("/<eid>")
|
||
|
|
@require_perm(Permission.ENGAGEMENT_UPDATE)
|
||
|
|
def update_engagement(eid: str):
|
||
|
|
engagement = db.session.get(Engagement, parse_uuid(eid))
|
||
|
|
if engagement is None:
|
||
|
|
abort(404)
|
||
|
|
payload = parse_body(EngagementUpdate)
|
||
|
|
for field, value in payload.model_dump(exclude_unset=True).items():
|
||
|
|
setattr(engagement, field, value)
|
||
|
|
db.session.commit()
|
||
|
|
return jsonify_model(EngagementRead.model_validate(engagement))
|
||
|
|
|
||
|
|
|
||
|
|
@bp.delete("/<eid>")
|
||
|
|
@require_perm(Permission.ENGAGEMENT_DELETE)
|
||
|
|
def delete_engagement(eid: str):
|
||
|
|
engagement = db.session.get(Engagement, parse_uuid(eid))
|
||
|
|
if engagement is None:
|
||
|
|
abort(404)
|
||
|
|
engagement.status = EngagementStatus.ARCHIVED
|
||
|
|
db.session.commit()
|
||
|
|
return "", 204
|