GET returns softphone device data

Given I am authenticated as K0002
and there is an Softphone Device Type with name softphone
and there is a softphone Device with ID device123
which has been created at 2015-10-12 04:25 and with useSiteOptionsFromSite set to true
When I send /api/customers/K0002/devices/softphone/device123
Then I should receive HTTP/1.1 200 OK with following body:

{
  "href": "/api/customers/K0002/devices/softphone/device123",
  "links": [{
    "rel": "deviceType",
    "href": "/api/customers/K0002/device-types/softphone"
  }, {
    "rel": "extension",
    "href": null
  }, {
    "rel": "site",
    "href": "/api/customers/K0002/sites/1"
  }, {
    "rel": "customer",
    "href": "/api/customers/K0002"
  }, {
    "rel": "activation",
    "href": "/api/customers/K0002/devices/softphone/device123/activate"
  }, {
    "rel": "siteOptions",
    "href": "/api/customers/K0002/devices/softphone/device123/site-options"
  }],
  "data": [{
    "name": "uniqueIdentifier",
    "value": "device123"
  }, {
    "name": "useSiteOptionsFromSite",
    "value": true
  }, {
    "name": "deviceType",
    "value": "softphone"
  }, {
    "name": "deviceId",
    "value": "device123"
  }, {
    "name": "extension",
    "value": ""
  }, {
    "name": "created",
    "value": "2015-10-12 04:25"
  }, {
    "name": "active",
    "value": true
  }, {
    "name": "site",
    "value": "Dummy site K0002"
  }, {
    "name": "deviceMasterCategory",
    "value": "SOFTPHONE"
  }, {
    "name": "deviceCategory",
    "value": "category"
  }, {
    "name": "suppressLineno",
    "value": "DEFAULT"
  }, {
    "name": "note",
    "value": null
  }]
}

Cannot read data for missing Customer

Given I am authenticated as Admin
When I send /api/customers/K0404/devices/softphone/00123
Then I should receive HTTP/1.1 404 Not Found
with following body:

{
  "described_by": "http://api.nfon.net/probs/customer-not-found",
  "title": "Customer not found",
  "detail": "Customer with identifier K0404 has not been found"
}

Cannot read data for missing Device

Given I am authenticated as customer K0002
And there is no softphone with id ABCDEF012345
When I send /api/customers/K0002/devices/softphone/ABCDEF012345
Then I should receive HTTP/1.1 404 Not Found
with following body:

{
  "title": "Device not found",
  "detail": "Device with unique identifier ABCDEF012345 has not been found",
  "described_by": "http://api.nfon.net/probs/device-not-found"
}

Customer cannot read another Customer device data

Given I am authenticated as customer K0003
When I send /api/customers/K0002/devices/softphone/00123
Then I should receive HTTP/1.1 403 Forbidden
with following body:

{
  "title": "Access forbidden",
  "detail": "Access denied to [Customer] with id [K0002]",
  "described_by": "http://api.nfon.net/probs/invalid-authorization"
}

System integrator can see sipUsername

Given I am authenticated as System Integrator S0002
and there is an Softphone Device Type with name softphone
and there is a Softphone Device with ID device123
and with useSiteOptionsFromSite set to false
which has been created at 2015-10-12 04:25 When I send /api/customers/K0002/devices/softphone/device123
Then I should receive HTTP/1.1 200 OK with following body:

{
  "href": "/api/customers/K0002/devices/softphone/device123",
  "links": [{
    "rel": "deviceType",
    "href": "/api/customers/K0002/device-types/softphone"
  }, {
    "rel": "site",
    "href": "/api/customers/K0002/sites/1"
  }, {
    "rel": "customer",
    "href": "/api/customers/K0002"
  }, {
    "rel": "activation",
    "href": "/api/customers/K0002/devices/softphone/device123/activate"
  }, {
    "rel": "siteOptions",
    "href": "/api/customers/K0002/devices/softphone/device123/site-options"
  }],
  "data": [{
    "name": "uniqueIdentifier",
    "value": "device123"
  }, {
    "name": "useSiteOptionsFromSite",
    "value": false
  }, {
    "name": "deviceType",
    "value": "softphone"
  }, {
    "name": "deviceId",
    "value": "device123"
  }, {
    "name": "extension",
    "value": ""
  }, {
    "name": "sipUsername",
    "value": "K0002"
  }, {
    "name": "created",
    "value": "2015-10-12 04:25"
  }, {
    "name": "active",
    "value": true
  }, {
    "name": "site",
    "value": "Dummy site K0002"
  }, {
    "name": "deviceMasterCategory",
    "value": "SOFTPHONE"
  }, {
    "name": "deviceCategory",
    "value": "category"
  }]
}

Operator can see sipSecret

Given I am authenticated as Operator C0002
and there is an Softphone Device Type with name softphone
and there is a Softphone Device with ID device123
and it has sipSecret set to kSIzxm76EE2
and with useSiteOptionsFromSite set to false
which has been created at 2015-10-12 04:25 When I send /api/customers/K0002/devices/softphone/device123
Then I should receive HTTP/1.1 200 OK with following body:

{
  "href": "/api/customers/K0002/devices/softphone/device123",
  "links": [{
    "rel": "deviceType",
    "href": "/api/customers/K0002/device-types/softphone"
  }, {
    "rel": "site",
    "href": "/api/customers/K0002/sites/1"
  }, {
    "rel": "customer",
    "href": "/api/customers/K0002"
  }, {
    "rel": "activation",
    "href": "/api/customers/K0002/devices/softphone/device123/activate"
  }, {
    "rel": "siteOptions",
    "href": "/api/customers/K0002/devices/softphone/device123/site-options"
  }],
  "data": [{
    "name": "uniqueIdentifier",
    "value": "device123"
  }, {
    "name": "useSiteOptionsFromSite",
    "value": false
  }, {
    "name": "deviceType",
    "value": "softphone"
  }, {
    "name": "deviceId",
    "value": "device123"
  }, {
    "name": "extension",
    "value": ""
  }, {
    "name": "sipUsername",
    "value": "K0002"
  }, {
    "name": "sipSecret",
    "value": "kSIzxm76EE2"
  }, {
    "name": "created",
    "value": "2015-10-12 04:25"
  }, {
    "name": "active",
    "value": true
  }, {
    "name": "site",
    "value": "Dummy site K0002"
  }, {
    "name": "deviceMasterCategory",
    "value": "SOFTPHONE"
  }, {
    "name": "deviceCategory",
    "value": "category"
  }]
}

System Integrator cannot access Softphone Device of Customer that does not belong to him

Given I am authenticated as System Integrator S0002
When I send /api/customers/K0003/devices/softphone/device123
Then I should receive HTTP/1.1 403 Forbidden
with following body

{
  "title": "Access forbidden",
  "detail": "Access denied to [Customer] with id [K0003]",
  "described_by": "http://api.nfon.net/probs/invalid-authorization"
}

Operator cannot access Softphone Device of Customer that does not belong to him

Given I am authenticated as Operator C0002
When I send /api/customers/K0003/devices/softphone/device123
Then I should receive HTTP/1.1 403 Forbidden
with following body

{
  "title": "Access forbidden",
  "detail": "Access denied to [Customer] with id [K0003]",
  "described_by": "http://api.nfon.net/probs/invalid-authorization"
}

Service Portal REST API

GET /api/customers/{identifier}/devices/softphone/{externalIdentifier}