API updates

- Move all generic API classes definitions to the rest_api.generics
module.
- Update API status code on insufficient access for the apps:
indexes, parsing, documents, metadata, ocr, permission,
user management.
- Update API tests.

Signed-off-by: Roberto Rosario <roberto.rosario@mayan-edms.com>

mayan/apps/user_management/api_views.py

@@ -4,11 +4,8 @@ from django.contrib.auth import get_user_model
 from django.contrib.auth.models import Group
 from django.shortcuts import get_object_or_404
 
-from rest_framework import generics
-
 from mayan.apps.acls.models import AccessControlList
-from mayan.apps.rest_api.filters import MayanObjectPermissionsFilter
-from mayan.apps.rest_api.permissions import MayanPermission
+from mayan.apps.rest_api import generics
 
 from .permissions import (
     permission_group_create, permission_group_delete, permission_group_edit,
@@ -38,10 +35,8 @@ class APIGroupListView(generics.ListCreateAPIView):
     get: Returns a list of all the groups.
     post: Create a new group.
     """
-    filter_backends = (MayanObjectPermissionsFilter,)
     mayan_object_permissions = {'GET': (permission_group_view,)}
     mayan_view_permissions = {'POST': (permission_group_create,)}
-    permission_classes = (MayanPermission,)
     queryset = Group.objects.order_by('id')
     serializer_class = GroupSerializer
 
@@ -59,7 +54,6 @@ class APIGroupView(generics.RetrieveUpdateDestroyAPIView):
         'PATCH': (permission_group_edit,),
         'DELETE': (permission_group_delete,)
     }
-    permission_classes = (MayanPermission,)
     queryset = Group.objects.order_by('id')
     serializer_class = GroupSerializer
 
@@ -69,10 +63,8 @@ class APIUserListView(generics.ListCreateAPIView):
     get: Returns a list of all the users.
     post: Create a new user.
     """
-    filter_backends = (MayanObjectPermissionsFilter,)
     mayan_object_permissions = {'GET': (permission_user_view,)}
     mayan_view_permissions = {'POST': (permission_user_create,)}
-    permission_classes = (MayanPermission,)
     queryset = get_user_model().objects.all()
     serializer_class = UserSerializer
 
@@ -90,7 +82,6 @@ class APIUserView(generics.RetrieveUpdateDestroyAPIView):
         'PATCH': (permission_user_edit,),
         'DELETE': (permission_user_delete,)
     }
-    permission_classes = (MayanPermission,)
     queryset = get_user_model().objects.all()
     serializer_class = UserSerializer
 
@@ -100,12 +91,6 @@ class APIUserGroupList(generics.ListCreateAPIView):
     get: Returns a list of all the groups to which a user belongs.
     post: Add a user to a list of groups.
     """
-    mayan_object_permissions = {
-        'GET': (permission_user_view,),
-        'POST': (permission_user_edit,)
-    }
-    permission_classes = (MayanPermission,)
-
     def get_serializer(self, *args, **kwargs):
         if not self.request:
             return None