Begin the work to allow robots and teams to be managed via API.

endpoints/api/robot.py

@@ -1,7 +1,8 @@
 from endpoints.api import (resource, nickname, ApiResource, log_action, related_user_resource,
-                           Unauthorized, require_user_admin, internal_only)
+                           Unauthorized, require_user_admin, internal_only, require_scope)
 from auth.permissions import AdministerOrganizationPermission, OrganizationMemberPermission
 from auth.auth_context import get_authenticated_user
+from auth import scopes
 from data import model
 from util.names import format_robot_username
 
@@ -52,10 +53,10 @@ class UserRobot(ApiResource):
 
 
 @resource('/v1/organization/<orgname>/robots')
-@internal_only
 @related_user_resource(UserRobotList)
 class OrgRobotList(ApiResource):
   """ Resource for listing an organization's robots. """
+  @require_scope(scopes.ORG_ADMIN)
   @nickname('getOrgRobots')
   def get(self, orgname):
     """ List the organization's robots. """
@@ -70,10 +71,10 @@ class OrgRobotList(ApiResource):
 
 
 @resource('/v1/organization/<orgname>/robots/<robot_shortname>')
-@internal_only
 @related_user_resource(UserRobot)
 class OrgRobot(ApiResource):
   """ Resource for managing an organization's robots. """
+  @require_scope(scopes.ORG_ADMIN)
   @nickname('createOrgRobot')
   def put(self, orgname, robot_shortname):
     """ Create a new robot in the organization. """
@@ -86,6 +87,7 @@ class OrgRobot(ApiResource):
 
     raise Unauthorized()
 
+  @require_scope(scopes.ORG_ADMIN)
   @nickname('deleteOrgRobot')
   def delete(self, orgname, robot_shortname):
     """ Delete an existing organization robot. """