Api >

Service Portal REST API

GET Customer's Speed Dial
Given I am authenticated as customer K0002
and there is a Speed Dial with
  • id: 100
  • name: SpeedDial1
  • destination: *555#1234
  • code: 1255
When I send /api/customers/K0002/speed-dials/100
Then I should receive HTTP/1.1 200 OK
with following body:
{
  "href": "/api/customers/K0002/speed-dials/100",
  "links": [],
  "data": [{
    "name": "destination",
    "value": "*555#1234"
  }, {
    "name": "name",
    "value": "SpeedDial1"
  }, {
    "name": "code",
    "value": "1255"
  }, {
    "name": "outwardDialOverwrite",
    "value": false
  }]
}
Missing Speed Dial
Given I am authenticated as customer K0002
And there is no Speed Dial with ID 404 When I send /api/customers/K0002/speed-dials/404
Then I should receive HTTP/1.1 404 Not Found
{
  "detail": "Speed Dial with ID 404 has not been found",
  "title": "Speed Dial not found",
  "described_by": "http://api.nfon.net/probs/speed-dial-not-found"
}
Missing Customer
Given I am authenticated as Admin
When I send /api/customers/K0404/speed-dials/100
Then I should receive HTTP/1.1 404 Not Found
{
  "detail": "Customer with identifier K0404 has not been found",
  "title": "Customer not found",
  "described_by": "http://api.nfon.net/probs/customer-not-found"
}
Customer should not be able to GET another Customer's Speed Dial
Given I am authenticated as Customer K0003
When I send /api/customers/K0002/targets/speed-dials/100
Then I should receive HTTP/1.1 403 Forbidden
{
  "title": "Access forbidden",
  "detail": "Access denied to [Customer] with id [K0002]",
  "described_by": "http://api.nfon.net/probs/invalid-authorization"
}
System Integrator should not be able to GET Speed Dial of a Customer that he cannot manage
Given I am authenticated as System Integrator S0002
When I send /api/customers/K0003/targets/speed-dials/100
Then I should receive HTTP/1.1 403 Forbidden
{
  "title": "Access forbidden",
  "detail": "Access denied to [Customer] with id [K0003]",
  "described_by": "http://api.nfon.net/probs/invalid-authorization"
}
Operator should not be able to GET Speed Dial of a Customer that he cannot manage
Given I am authenticated as Operator C0002
When I send /api/customers/K0003/targets/speed-dials/100
Then I should receive HTTP/1.1 403 Forbidden
{
  "title": "Access forbidden",
  "detail": "Access denied to [Customer] with id [K0003]",
  "described_by": "http://api.nfon.net/probs/invalid-authorization"
}