Dataset sets management API endpoints

closes #1720 (closed)

requires !2264 (merged)

EDIT: contrary to what it says in the issue, the endpoints require contributor access to the dataset's corpus, excepted for DELETE which requires admin access.

TODO

• Update Dataset endpoints documentation (no more sets editing there)

arkindex/ponos/tests/test_api.py

@@ -111,19 +111,18 @@ class TestAPI(FixtureAPITestCase):
             resp = self.client.get(reverse("api:task-details", args=[self.task1.id]))
             self.assertEqual(resp.status_code, status.HTTP_403_FORBIDDEN)
 
-    @expectedFailure
-    def test_task_details_requires_process_guest(self):
-        self.process.creator = self.superuser
-        self.process.save()
-        self.corpus.memberships.filter(user=self.user).delete()
-        self.corpus.public = False
-        self.corpus.save()
+    @patch("arkindex.project.mixins.get_max_level")
+    def test_task_details_requires_process_guest(self, get_max_level_mock):
+        get_max_level_mock.return_value = None
         self.client.force_login(self.user)
 
-        with self.assertNumQueries(5):
+        with self.assertNumQueries(3):
             resp = self.client.get(reverse("api:task-details", args=[self.task1.id]))
             self.assertEqual(resp.status_code, status.HTTP_403_FORBIDDEN)
 
+        self.assertEqual(get_max_level_mock.call_count, 1)
+        self.assertEqual(get_max_level_mock.call_args, call(self.user, self.corpus))
+
     @patch("arkindex.project.aws.s3")
     def test_task_details_process_level_corpus(self, s3_mock):
         s3_mock.Object.return_value.bucket_name = "ponos"