Make change repo visibility and create repo raise a 402 when applicable

We now check the user or org's subscription plan and raise a 402 if the user attempts to create/make a repo private over their limit

endpoints/api/repository.py

@@ -2,6 +2,7 @@
 
 import logging
 import datetime
+import features
 
 from datetime import timedelta
 
@@ -15,7 +16,8 @@ from endpoints.api import (truthy_bool, format_date, nickname, log_action, valid
                            require_repo_read, require_repo_write, require_repo_admin,
                            RepositoryParamResource, resource, query_param, parse_args, ApiResource,
                            request_error, require_scope, Unauthorized, NotFound, InvalidRequest,
-                           path_param)
+                           path_param, ExceedsLicenseException)
+from endpoints.api.billing import lookup_allowed_private_repos
 
 from auth.permissions import (ModifyRepositoryPermission, AdministerRepositoryPermission,
                               CreateRepositoryPermission)
@@ -26,6 +28,18 @@ from auth import scopes
 logger = logging.getLogger(__name__)
 
 
+def check_allowed_private_repos(namespace):
+  """ Checks to see if the given namespace has reached its private repository limit. If so,
+      raises a ExceedsLicenseException.
+  """
+  # Not enabled if billing is disabled.
+  if not features.BILLING:
+    return
+
+  if not lookup_allowed_private_repos(namespace):
+    raise ExceedsLicenseException()
+
+
 @resource('/v1/repository')
 class RepositoryList(ApiResource):
   """Operations for creating and listing repositories."""
@@ -87,6 +101,8 @@ class RepositoryList(ApiResource):
         raise request_error(message='Repository already exists')
 
       visibility = req['visibility']
+      if visibility == 'private':
+        check_allowed_private_repos(namespace_name)
 
       repo = model.repository.create_repository(namespace_name, repository_name, owner, visibility)
       repo.description = req['description']
@@ -339,7 +355,11 @@ class RepositoryVisibility(RepositoryParamResource):
     repo = model.repository.get_repository(namespace, repository)
     if repo:
       values = request.get_json()
-      model.repository.set_repository_visibility(repo, values['visibility'])
+      visibility = values['visibility']
+      if visibility == 'private':
+        check_allowed_private_repos(namespace)
+
+      model.repository.set_repository_visibility(repo, visibility)
       log_action('change_repo_visibility', namespace,
                  {'repo': repository, 'visibility': values['visibility']},
                  repo=repo)