configuration_script_sources subcollection

app/controllers/api/configuration_script_sources_controller.rb

@@ -1,5 +1,7 @@
 module Api
   class ConfigurationScriptSourcesController < BaseController
+    include Subcollections::ConfigurationScriptPayloads
+
     def edit_resource(type, id, data)
       config_script_src = resource_search(id, type, collection_class(:configuration_script_sources))
       raise "Update not supported for #{config_script_src_ident(config_script_src)}" unless config_script_src.respond_to?(:update_in_provider_queue)

app/controllers/api/subcollections/configuration_script_payloads.rb

@@ -0,0 +1,9 @@
+module Api
+  module Subcollections
+    module ConfigurationScriptPayloads
+      def configuration_script_payloads_query_resource(object)
+        object.configuration_script_payloads
+      end
+    end
+  end
+end

config/api.yml

@@ -564,6 +564,7 @@
     :description: Configuration Script Payloads
     :options:
     - :collection
+    - :subcollection
     :verbs: *g
     :klass: ConfigurationScriptPayload
     :subcollections:
@@ -576,6 +577,10 @@
       :get:
       - :name: read
         :identifier: embedded_configuration_script_payload_view
+    :subcollection_actions:
+      :get:
+      - :name: read
+        :identifier: embedded_configuration_script_payload_view
     :authentications_subcollection_actions:
       :get:
       - :name: read
@@ -589,6 +594,8 @@
     - :collection
     :verbs: *gpppd
     :klass: ConfigurationScriptSource
+    :subcollections:
+      - :configuration_script_payloads
     :collection_actions:
       :get:
       - :name: read

spec/requests/api/configuration_script_sources_spec.rb

@@ -432,4 +432,55 @@
       expect(response).to have_http_status(:forbidden)
     end
   end
+
+  describe 'GET /api/configuration_script_sources/:id/configuration_script_payloads' do
+    let(:payload) { FactoryGirl.create(:configuration_script_payload) }
+    let(:url) { "#{configuration_script_sources_url(config_script_src.id)}/configuration_script_payloads" }
+
+    before do
+      config_script_src.configuration_script_payloads << payload
+    end
+
+    it 'forbids configuration_script_payload retrievel without an appropriate role' do
+      api_basic_authorize
+
+      run_get(url)
+
+      expect(response).to have_http_status(:forbidden)
+    end
+
+    it 'lists all configuration_script_payloads belonging to a configuration_script_source' do
+      api_basic_authorize subcollection_action_identifier(:configuration_script_sources, :configuration_script_payloads, :read, :get)
+
+      run_get(url)
+
+      expected = {
+        'resources' => [{'href' => a_string_including("#{url}/#{payload.id}")}]
+      }
+      expect(response).to have_http_status(:ok)
+      expect(response.parsed_body).to include(expected)
+    end
+
+    it 'can filter on region_number' do
+      api_basic_authorize subcollection_action_identifier(:configuration_script_sources, :configuration_script_payloads, :read, :get)
+
+      run_get url, :filter => ["region_number=#{payload.region_number}"]
+
+      expected = {
+        'subcount'  => 1,
+        'resources' => [{'href' => a_string_including("#{url}/#{payload.id}")}]
+      }
+      expect(response).to have_http_status(:ok)
+      expect(response.parsed_body).to include(expected)
+
+      run_get url, :filter => ["region_number=foo"]
+
+      expected = {
+        'subcount'  => 0,
+        'resources' => []
+      }
+      expect(response).to have_http_status(:ok)
+      expect(response.parsed_body).to include(expected)
+    end
+  end
 end