Add internal API filtering.

endpoints/api/billing.py

@@ -5,7 +5,7 @@ from flask import request
 from flask.ext.restful import abort
 
 from endpoints.api import (resource, nickname, ApiResource, validate_json_request, log_action,
-                           related_user_resource)
+                           related_user_resource, internal_only)
 from endpoints.api.subscribe import subscribe, subscription_view
 from auth.permissions import AdministerOrganizationPermission
 from auth.auth_context import get_authenticated_user
@@ -91,6 +91,7 @@ class ListPlans(ApiResource):
 
 
 @resource('/v1/user/card')
+@internal_only
 class UserCard(ApiResource):
   """ Resource for managing a user's credit card. """
   schemas = {
@@ -127,6 +128,7 @@ class UserCard(ApiResource):
 
 
 @resource('/v1/organization/<orgname>/card')
+@internal_only
 @related_user_resource(UserCard)
 class OrganizationCard(ApiResource):
   """ Resource for managing an organization's credit card. """
@@ -172,6 +174,7 @@ class OrganizationCard(ApiResource):
 
 
 @resource('/v1/user/plan')
+@internal_only
 class UserPlan(ApiResource):
   """ Resource for managing a user's subscription. """
   schemas = {
@@ -223,6 +226,7 @@ class UserPlan(ApiResource):
 
 
 @resource('/v1/organization/<orgname>/plan')
+@internal_only
 @related_user_resource(UserPlan)
 class OrganizationPlan(ApiResource):
   """ Resource for managing a org's subscription. """