From 14be9e30deae5714a3bdcd7e0bfe3cddf8fd1844 Mon Sep 17 00:00:00 2001
From: Gareth Coles <gdude2002@gmail.com>
Date: Fri, 27 Jul 2018 17:10:19 +0100
Subject: Don't remove basic user objects, add API for querying them

Also update privacy policy in accordance with this
---
 pysite/views/api/bot/user.py | 35 ++++++++++++++++++++++++++++++-----
 1 file changed, 30 insertions(+), 5 deletions(-)

(limited to 'pysite')

diff --git a/pysite/views/api/bot/user.py b/pysite/views/api/bot/user.py
index 189dd1f8..c8d769d5 100644
--- a/pysite/views/api/bot/user.py
+++ b/pysite/views/api/bot/user.py
@@ -1,4 +1,5 @@
 import logging
+import rethinkdb
 
 from flask import jsonify, request
 from schema import Optional, Schema
@@ -18,6 +19,12 @@ SCHEMA = Schema([
     }
 ])
 
+GET_SCHEMA = Schema([
+    {
+        "user_id": str
+    }
+])
+
 DELETE_SCHEMA = Schema([
     {
         "user_id": str,
@@ -45,6 +52,24 @@ class UserView(APIView, DBMixin):
     table_name = "users"
     teams_table = "code_jam_teams"
 
+    @api_key
+    @api_params(schema=GET_SCHEMA, validation_type=ValidationTypes.params)
+    def get(self, data):
+        logging.getLogger(__name__).debug(f"Size of request: {len(request.data)} bytes")
+
+        if not data:
+            return self.error(ErrorCodes.bad_data_format, "No user IDs supplied")
+
+        data = [x["user_id"] for x in data]
+
+        result = self.db.run(
+            self.db.query(self.table_name)
+            .filter(lambda document: rethinkdb.expr(data).contains(document["user_id"])),
+            coerce=list
+        )
+
+        return jsonify({"result": result})  # pragma: no cover
+
     @api_key
     @api_params(schema=SCHEMA, validation_type=ValidationTypes.json)
     def post(self, data):
@@ -72,11 +97,11 @@ class UserView(APIView, DBMixin):
     def delete(self, data):
         user_ids = [user["user_id"] for user in data]
 
-        changes = self.db.run(
-            self.db.query(self.table_name)
-            .get_all(*user_ids)
-            .delete()
-        )
+        # changes = self.db.run(
+        #     self.db.query(self.table_name)
+        #     .get_all(*user_ids)
+        #     .delete()
+        # )
 
         oauth_deletions = self.db.run(
             self.db.query(self.oauth_table_name)
-- 
cgit v1.2.3