Add ability for triggers to be disabled

Will be used in the followup commit to automatically disable broken triggers

endpoints/api/build.py

@@ -22,7 +22,8 @@ from endpoints.api import (RepositoryParamResource, parse_args, query_param, nic
                            require_repo_read, require_repo_write, validate_json_request,
                            ApiResource, internal_only, format_date, api, path_param,
                            require_repo_admin, abort, disallow_for_app_repositories)
-from endpoints.building import start_build, PreparedBuild, MaximumBuildsQueuedException
+from endpoints.building import (start_build, PreparedBuild, MaximumBuildsQueuedException,
+                                BuildTriggerDisabledException)
 from endpoints.exception import Unauthorized, NotFound, InvalidRequest
 from util.names import parse_robot_username
 
@@ -69,6 +70,8 @@ def trigger_view(trigger, can_read=False, can_admin=False, for_build=False):
 
       'config': build_trigger.config if can_admin else {},
       'can_invoke': can_admin,
+      'enabled': trigger.enabled,
+      'disabled_reason': trigger.disabled_reason.name if trigger.disabled_reason else None,
     }
 
     if not for_build and can_admin and trigger.pull_robot:
@@ -309,6 +312,8 @@ class RepositoryBuildList(RepositoryParamResource):
       build_request = start_build(repo, prepared, pull_robot_name=pull_robot_name)
     except MaximumBuildsQueuedException:
       abort(429, message='Maximum queued build rate exceeded.')
+    except BuildTriggerDisabledException:
+      abort(400, message='Build trigger is disabled')
 
     resp = build_status_view(build_request)
     repo_string = '%s/%s' % (namespace, repository)

endpoints/api/test/test_security.py

@@ -13,7 +13,11 @@ from endpoints.api.signing import RepositorySignatures
 from endpoints.api.search import ConductRepositorySearch
 from endpoints.api.superuser import SuperUserRepositoryBuildLogs, SuperUserRepositoryBuildResource
 from endpoints.api.superuser import SuperUserRepositoryBuildStatus
+<<<<<<< HEAD
 from endpoints.api.appspecifictokens import AppTokens, AppToken
+=======
+from endpoints.api.trigger import BuildTrigger
+>>>>>>> Add ability for triggers to be disabled
 from endpoints.test.shared import client_with_identity, toggle_feature
 
 from test.fixtures import *
@@ -24,6 +28,7 @@ REPO_PARAMS = {'repository': 'devtable/someapp'}
 SEARCH_PARAMS = {'query': ''}
 NOTIFICATION_PARAMS = {'namespace': 'devtable', 'repository': 'devtable/simple', 'uuid': 'some uuid'}
 TOKEN_PARAMS = {'token_uuid': 'someuuid'}
+TRIGGER_PARAMS = {'repository': 'devtable/simple', 'trigger_uuid': 'someuuid'}
 
 @pytest.mark.parametrize('resource,method,params,body,identity,expected', [
   (AppTokens, 'GET', {}, {}, None, 401),
@@ -89,7 +94,22 @@ TOKEN_PARAMS = {'token_uuid': 'someuuid'}
   (RepositoryTrust, 'POST', REPO_PARAMS, {'trust_enabled': True}, 'freshuser', 403),
   (RepositoryTrust, 'POST', REPO_PARAMS, {'trust_enabled': True}, 'reader', 403),
   (RepositoryTrust, 'POST', REPO_PARAMS, {'trust_enabled': True}, 'devtable', 404),
-  
+
+  (BuildTrigger, 'GET', TRIGGER_PARAMS, {}, None, 401),
+  (BuildTrigger, 'GET', TRIGGER_PARAMS, {}, 'freshuser', 403),
+  (BuildTrigger, 'GET', TRIGGER_PARAMS, {}, 'reader', 403),
+  (BuildTrigger, 'GET', TRIGGER_PARAMS, {}, 'devtable', 404),
+
+  (BuildTrigger, 'DELETE', TRIGGER_PARAMS, {}, None, 403),
+  (BuildTrigger, 'DELETE', TRIGGER_PARAMS, {}, 'freshuser', 403),
+  (BuildTrigger, 'DELETE', TRIGGER_PARAMS, {}, 'reader', 403),
+  (BuildTrigger, 'DELETE', TRIGGER_PARAMS, {}, 'devtable', 404),
+
+  (BuildTrigger, 'PUT', TRIGGER_PARAMS, {}, None, 403),
+  (BuildTrigger, 'PUT', TRIGGER_PARAMS, {}, 'freshuser', 403),
+  (BuildTrigger, 'PUT', TRIGGER_PARAMS, {}, 'reader', 403),
+  (BuildTrigger, 'PUT', TRIGGER_PARAMS, {}, 'devtable', 400),
+
   (RepositoryUserTransitivePermission, 'GET', {'username': 'A2O9','repository': 'public/publicrepo'}, None, None, 401),
   (RepositoryUserTransitivePermission, 'GET', {'username': 'A2O9','repository': 'public/publicrepo'}, None, 'freshuser', 403),
   (RepositoryUserTransitivePermission, 'GET', {'username': 'A2O9','repository': 'public/publicrepo'}, None, 'reader', 403),

endpoints/api/test/test_trigger.py

@@ -1,6 +1,12 @@
 import pytest
+import json
 
+from data import model
 from endpoints.api.trigger_analyzer import is_parent
+from endpoints.api.trigger import BuildTrigger
+from endpoints.api.test.shared import conduct_api_call
+from endpoints.test.shared import client_with_identity
+from test.fixtures import *
 
 
 @pytest.mark.parametrize('context,dockerfile_path,expected', [
@@ -20,3 +26,30 @@ from endpoints.api.trigger_analyzer import is_parent
 ])
 def test_super_user_build_endpoints(context, dockerfile_path, expected):
   assert is_parent(context, dockerfile_path) == expected
+
+
+def test_enabled_disabled_trigger(app, client):
+  trigger = model.build.list_build_triggers('devtable', 'building')[0]
+  trigger.config = json.dumps({'hook_id': 'someid'})
+  trigger.save()
+
+  params = {
+    'repository': 'devtable/building',
+    'trigger_uuid': trigger.uuid,
+  }
+
+  body = {
+    'enabled': False,
+  }
+
+  with client_with_identity('devtable', client) as cl:
+    result = conduct_api_call(cl, BuildTrigger, 'PUT', params, body, 200).json
+    assert not result['enabled']
+
+  body = {
+    'enabled': True,
+  }
+
+  with client_with_identity('devtable', client) as cl:
+    result = conduct_api_call(cl, BuildTrigger, 'PUT', params, body, 200).json
+    assert result['enabled']

endpoints/api/trigger.py

@@ -22,7 +22,8 @@ from endpoints.api import (RepositoryParamResource, nickname, resource, require_
                            disallow_for_app_repositories)
 from endpoints.api.build import build_status_view, trigger_view, RepositoryBuildStatus
 from endpoints.api.trigger_analyzer import TriggerAnalyzer
-from endpoints.building import start_build, MaximumBuildsQueuedException
+from endpoints.building import (start_build, MaximumBuildsQueuedException,
+                                BuildTriggerDisabledException)
 from endpoints.exception import NotFound, Unauthorized, InvalidRequest
 from util.names import parse_robot_username
 
@@ -62,6 +63,21 @@ class BuildTriggerList(RepositoryParamResource):
 @path_param('trigger_uuid', 'The UUID of the build trigger')
 class BuildTrigger(RepositoryParamResource):
   """ Resource for managing specific build triggers. """
+  schemas = {
+    'UpdateTrigger': {
+      'type': 'object',
+      'description': 'Options for updating a build trigger',
+      'required': [
+        'enabled',
+      ],
+      'properties': {
+        'enabled': {
+          'type': 'boolean',
+          'description': 'Whether the build trigger is enabled',
+        },
+      }
+    },
+  }
 
   @require_repo_admin
   @disallow_for_app_repositories
@@ -70,6 +86,27 @@ class BuildTrigger(RepositoryParamResource):
     """ Get information for the specified build trigger. """
     return trigger_view(get_trigger(trigger_uuid), can_admin=True)
 
+  @require_repo_admin
+  @disallow_for_app_repositories
+  @nickname('updateBuildTrigger')
+  @validate_json_request('UpdateTrigger')
+  def put(self, namespace_name, repo_name, trigger_uuid):
+    """ Updates the specified build trigger. """
+    trigger = get_trigger(trigger_uuid)
+
+    handler = BuildTriggerHandler.get_handler(trigger)
+    if not handler.is_active():
+      raise InvalidRequest('Cannot update an unactivated trigger')
+
+    enable = request.get_json()['enabled']
+    model.build.toggle_build_trigger(trigger, enable)
+    log_action('toggle_repo_trigger', namespace_name,
+                {'repo': repo_name, 'trigger_id': trigger_uuid,
+                'service': trigger.service.name, 'enabled': enable},
+                repo=model.repository.get_repository(namespace_name, repo_name))
+                
+    return trigger_view(trigger)
+
   @require_repo_admin
   @disallow_for_app_repositories
   @nickname('deleteBuildTrigger')
@@ -340,6 +377,8 @@ class ActivateBuildTrigger(RepositoryParamResource):
   def post(self, namespace_name, repo_name, trigger_uuid):
     """ Manually start a build from the specified trigger. """
     trigger = get_trigger(trigger_uuid)
+    if not trigger.enabled:
+      raise InvalidRequest('Trigger is not enabled.')
 
     handler = BuildTriggerHandler.get_handler(trigger)
     if not handler.is_active():
@@ -356,6 +395,8 @@ class ActivateBuildTrigger(RepositoryParamResource):
       raise InvalidRequest(tse.message)
     except MaximumBuildsQueuedException:
       abort(429, message='Maximum queued build rate exceeded.')
+    except BuildTriggerDisabledException:
+      abort(400, message='Build trigger is disabled')
 
     resp = build_status_view(build_request)
     repo_string = '%s/%s' % (namespace_name, repo_name)
@@ -485,3 +526,4 @@ class BuildTriggerSourceNamespaces(RepositoryParamResource):
         raise InvalidRequest(rre.message)
     else:
       raise Unauthorized()
+