From f0a3db6bfbb756bcf410ea7638be0f2ed71b34a1 Mon Sep 17 00:00:00 2001
From: Valentin Deniaud <vdeniaud@entrouvert.com>
Date: Thu, 17 Dec 2020 18:20:29 +0100
Subject: [PATCH] api: add anonymize booking endpoint (#49093)

---
 .../management/commands/anonymize_bookings.py     | 10 +---------
 chrono/agendas/models.py                          | 15 +++++++++++++++
 chrono/api/urls.py                                |  1 +
 chrono/api/views.py                               | 13 +++++++++++++
 tests/test_api.py                                 | 13 +++++++++++++
 5 files changed, 43 insertions(+), 9 deletions(-)

diff --git a/chrono/agendas/management/commands/anonymize_bookings.py b/chrono/agendas/management/commands/anonymize_bookings.py
index 4ae6ee4..565bbea 100644
--- a/chrono/agendas/management/commands/anonymize_bookings.py
+++ b/chrono/agendas/management/commands/anonymize_bookings.py
@@ -31,12 +31,4 @@ class Command(BaseCommand):
             anonymization_datetime__isnull=True,
             creation_datetime__lt=timezone.now() - timedelta(days=1) * F('event__agenda__anonymize_delay'),
         )
-
-        bookings_to_anonymize.update(
-            label='',
-            user_display_label='',
-            user_external_id='',
-            user_name='',
-            extra_data={},
-            anonymization_datetime=timezone.now(),
-        )
+        Booking.anonymize_bookings(bookings_to_anonymize)
diff --git a/chrono/agendas/models.py b/chrono/agendas/models.py
index 02c1cf5..c43a6ca 100644
--- a/chrono/agendas/models.py
+++ b/chrono/agendas/models.py
@@ -1071,6 +1071,21 @@ class Booking(models.Model):
             self.secondary_booking_set.update(in_waiting_list=True)
             self.save()
 
+    def anonymize(self):
+        qs = Booking.objects.filter(pk=self.pk)
+        Booking.anonymize_bookings(qs)
+
+    @classmethod
+    def anonymize_bookings(cls, bookings_queryset):
+        bookings_queryset.update(
+            label='',
+            user_display_label='',
+            user_external_id='',
+            user_name='',
+            extra_data={},
+            anonymization_datetime=now(),
+        )
+
     def get_ics(self, request=None):
         ics = vobject.iCalendar()
         ics.add('prodid').value = '-//Entr\'ouvert//NON SGML Publik'
diff --git a/chrono/api/urls.py b/chrono/api/urls.py
index e2f2df6..d3702d9 100644
--- a/chrono/api/urls.py
+++ b/chrono/api/urls.py
@@ -58,6 +58,7 @@ urlpatterns = [
     url(r'^booking/(?P<booking_pk>\w+)/$', views.booking),
     url(r'^booking/(?P<booking_pk>\w+)/cancel/$', views.cancel_booking, name='api-cancel-booking'),
     url(r'^booking/(?P<booking_pk>\w+)/accept/$', views.accept_booking, name='api-accept-booking'),
+    url(r'^booking/(?P<booking_pk>\w+)/anonymize/$', views.anonymize_booking, name='api-anonymize-booking'),
     url(r'^booking/(?P<booking_pk>\w+)/suspend/$', views.suspend_booking, name='api-suspend-booking'),
     url(r'^booking/(?P<booking_pk>\w+)/resize/$', views.resize_booking, name='api-resize-booking'),
     url(r'^booking/(?P<booking_pk>\w+)/ics/$', views.booking_ics, name='api-booking-ics'),
diff --git a/chrono/api/views.py b/chrono/api/views.py
index e9f516b..4ad962b 100644
--- a/chrono/api/views.py
+++ b/chrono/api/views.py
@@ -1282,6 +1282,19 @@ class SuspendBooking(APIView):
 suspend_booking = SuspendBooking.as_view()
 
 
+class AnonymizeBooking(APIView):
+    permission_classes = (permissions.IsAuthenticated,)
+
+    def post(self, request, booking_pk=None, format=None):
+        booking = get_object_or_404(Booking, id=booking_pk)
+        booking.anonymize()
+        response = {'err': 0, 'booking_id': booking.id}
+        return Response(response)
+
+
+anonymize_booking = AnonymizeBooking.as_view()
+
+
 class ResizeSerializer(serializers.Serializer):
     count = serializers.IntegerField(min_value=1)
 
diff --git a/tests/test_api.py b/tests/test_api.py
index f139200..7f26754 100644
--- a/tests/test_api.py
+++ b/tests/test_api.py
@@ -2506,6 +2506,19 @@ def test_resize_booking_non_event_agenda(app, user):
     app.post('/api/booking/%s/resize/' % booking.pk, params={'count': 42}, status=404)
 
 
+def test_anonymize_booking(app, some_data, user):
+    agenda_id = Agenda.objects.filter(label=u'Foo bar')[0].pk
+    event = Event.objects.filter(agenda_id=agenda_id).exclude(start_datetime__lt=now())[0]
+    booking = Booking.objects.create(event=event, label='test')
+    app.authorization = ('Basic', ('john.doe', 'password'))
+
+    resp = app.post('/api/booking/%s/anonymize/' % booking.pk)
+    assert resp.json['err'] == 0
+    booking.refresh_from_db()
+    assert booking.label == ''
+    assert booking.anonymization_datetime
+
+
 def test_multiple_booking_api(app, some_data, user):
     agenda = Agenda.objects.filter(label=u'Foo bar')[0]
     event = [x for x in Event.objects.filter(agenda=agenda) if x.in_bookable_period()][0]
-- 
2.20.1