API updates

- Move all generic API classes definitions to the rest_api.generics
module.
- Update API status code on insufficient access for the apps:
indexes, parsing, documents, metadata, ocr, permission,
user management.
- Update API tests.

Signed-off-by: Roberto Rosario <roberto.rosario@mayan-edms.com>

mayan/apps/ocr/api_views.py

@@ -2,11 +2,11 @@ from __future__ import absolute_import, unicode_literals
 
 from django.shortcuts import get_object_or_404
 
-from rest_framework import generics, status
+from rest_framework import status
 from rest_framework.response import Response
 
 from mayan.apps.documents.models import Document, DocumentVersion
-from mayan.apps.rest_api.permissions import MayanPermission
+from mayan.apps.rest_api import generics
 
 from .models import DocumentPageOCRContent
 from .permissions import permission_ocr_content_view, permission_ocr_document
@@ -20,7 +20,6 @@ class APIDocumentOCRView(generics.GenericAPIView):
     mayan_object_permissions = {
         'POST': (permission_ocr_document,)
     }
-    permission_classes = (MayanPermission,)
     queryset = Document.objects.all()
 
     def get_serializer(self, *args, **kwargs):
@@ -42,7 +41,6 @@ class APIDocumentVersionOCRView(generics.GenericAPIView):
     mayan_object_permissions = {
         'POST': (permission_ocr_document,)
     }
-    permission_classes = (MayanPermission,)
     queryset = DocumentVersion.objects.all()
 
     def get_document(self):
@@ -70,7 +68,6 @@ class APIDocumentPageOCRContentView(generics.RetrieveAPIView):
     mayan_object_permissions = {
         'GET': (permission_ocr_content_view,),
     }
-    permission_classes = (MayanPermission,)
     serializer_class = DocumentPageOCRContentSerializer
 
     def get_document(self):

mayan/apps/ocr/tests/test_api.py

@@ -21,7 +21,7 @@ class OCRAPITestCase(DocumentTestMixin, BaseAPITestCase):
 
     def test_submit_document_no_access(self):
         response = self._request_document_ocr_submit_view()
-        self.assertEqual(response.status_code, status.HTTP_403_FORBIDDEN)
+        self.assertEqual(response.status_code, status.HTTP_404_NOT_FOUND)
 
         self.assertFalse(
             hasattr(self.test_document.pages.first(), 'ocr_content')
@@ -48,7 +48,7 @@ class OCRAPITestCase(DocumentTestMixin, BaseAPITestCase):
 
     def test_submit_document_version_no_access(self):
         response = self._request_document_version_ocr_submit_view()
-        self.assertEqual(response.status_code, status.HTTP_403_FORBIDDEN)
+        self.assertEqual(response.status_code, status.HTTP_404_NOT_FOUND)
 
         self.assertFalse(
             hasattr(self.test_document.pages.first(), 'ocr_content')
@@ -76,7 +76,7 @@ class OCRAPITestCase(DocumentTestMixin, BaseAPITestCase):
 
     def test_get_document_version_page_content_no_access(self):
         response = self._request_document_page_content_view()
-        self.assertEqual(response.status_code, status.HTTP_403_FORBIDDEN)
+        self.assertEqual(response.status_code, status.HTTP_404_NOT_FOUND)
 
     def test_get_document_version_page_content_with_access(self):
         self.test_document.submit_for_ocr()