{"schemaVersion":"1.0","sourceCommit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca","sourceVisibility":"private","article":{"id":"api-mansoq-experience-be-sandboxviewset-1f3499f9","title":"Sandbox API reference · mansoq-experience-be","summary":"Static source contract for Sandbox: 3 declared or inherited operation mappings, schema/field evidence and authorization/refusal references. Deployment and behavioral review remain explicit.","module":"IT & integrations","roles":["IT administrator","Developer","Integration engineer"],"facilities":["All configured facility types"],"kind":"reference","minutes":3,"prerequisites":["Use the API contract from the installed deployment and an authorized synthetic test environment.","Confirm facility/organization scope, action permissions and optional app enablement.","This reference is static source evidence; complete payload, authorization, failure and end-to-end review remains recorded as pending."],"steps":[],"sections":[{"title":"Declared route and availability","body":"This resource is declared in **mansoq-experience-be** at `/api/{installed_plugin_prefix}/sandbox/`. plugin/local mount; actual prefix and enablement require deployment verification A registered path and an indexed handler do not prove deployment availability, user permission or production readiness."},{"title":"Operation map","body":"| Method | Path | Action | Evidence |\n| --- | --- | --- | --- |\n| POST | `/api/{installed_plugin_prefix}/sandbox/` | create | declared/inherited method |\n| GET | `/api/{installed_plugin_prefix}/sandbox/{external_id}/` | retrieve | declared/inherited method |\n| DELETE | `/api/{installed_plugin_prefix}/sandbox/{external_id}/` | destroy | declared/inherited method |"},{"title":"create · POST","body":"**POST /api/{installed_plugin_prefix}/sandbox/** — action `create`. static contract extracted; runtime/permission/payload behavior review pending.\n\nPath and deployment-context parameters:\n\n| Location | Parameter | Type | Required |\n| --- | --- | --- | --- |\n| deployment mount | installed_plugin_prefix | deployment-selected mount prefix | true |\n\nDirectly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):\n\n| Location | Field | Declared/inferred read type | Requiredness evidence |\n| --- | --- | --- | --- |\n| query | `is_facility_empty` | not declared at read site | not established |\n| body | `is_facility_empty` | not declared at read site | not established |\n| body | `facility_name` | not declared at read site | not established |\n| query | `facility_name` | not declared at read site | not established |\n\n**Authorization:** no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.\n\n**Class policy declarations:** permission_classes: IsSuperUser; authentication_classes: BasicAuthentication, SessionAuthentication.\n\n**Explicit response statuses in observed code:** status.HTTP_202_ACCEPTED. Other branches/framework exception handling may differ."},{"title":"retrieve · GET","body":"**GET /api/{installed_plugin_prefix}/sandbox/{external_id}/** — action `retrieve`. static contract extracted; runtime/permission/payload behavior review pending.\n\nPath and deployment-context parameters:\n\n| Location | Parameter | Type | Required |\n| --- | --- | --- | --- |\n| deployment mount | installed_plugin_prefix | deployment-selected mount prefix | true |\n| path | external_id | router lookup string; semantic ID validation requires handler/schema review | true |\n\n**Authorization:** no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.\n\n**Class policy declarations:** permission_classes: IsSuperUser; authentication_classes: BasicAuthentication, SessionAuthentication."},{"title":"destroy · DELETE","body":"**DELETE /api/{installed_plugin_prefix}/sandbox/{external_id}/** — action `destroy`. static contract extracted; runtime/permission/payload behavior review pending.\n\nPath and deployment-context parameters:\n\n| Location | Parameter | Type | Required |\n| --- | --- | --- | --- |\n| deployment mount | installed_plugin_prefix | deployment-selected mount prefix | true |\n| path | external_id | router lookup string; semantic ID validation requires handler/schema review | true |\n\n**Authorization:** no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.\n\n**Class policy declarations:** permission_classes: IsSuperUser; authentication_classes: BasicAuthentication, SessionAuthentication.\n\n**Explicit response statuses in observed code:** status.HTTP_204_NO_CONTENT. Other branches/framework exception handling may differ."},{"title":"Integration review checklist","body":"Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure."}],"troubleshooting":[{"problem":"A declared route is unavailable or a request is rejected","solution":"Compare the installed revision, actual API schema, optional plugin mount, HTTP-method restrictions and recorded validation/permission evidence. Do not bypass a refusal or send a production transaction to test documentation."}],"sources":[{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/urls.py","line":14,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":34,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":40,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":64,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":68,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}],"related":["it-api-contract","it-api-auth","security-rcm-roles"],"verification":"Static API contract — behavior review pending","version":"f6e9f05f76d4","apiReferenceIds":["backend-resource-6cfc8bec1f3499f9","backend-resource-6cfc8bec1f3499f9:POST:create","backend-resource-6cfc8bec1f3499f9:GET:retrieve","backend-resource-6cfc8bec1f3499f9:DELETE:destroy"]},"backend":{"resources":[{"id":"backend-resource-6cfc8bec1f3499f9","localPrefix":"sandbox","viewset":"SandboxViewSet","classId":"repositories/platform/mansoq-experience-be:mansoq_experience_sandbox_be.api.viewsets.SandboxViewSet","basename":"mansoq_experience_sandbox_be-sandbox","source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/urls.py","line":14,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"conditions":[],"repository":"repositories/platform/mansoq-experience-be","classSource":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":34,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"description":"","path":"/api/{installed_plugin_prefix}/sandbox/","mountStatus":"plugin/local mount; actual prefix and enablement require deployment verification","operationIds":["backend-resource-6cfc8bec1f3499f9:POST:create","backend-resource-6cfc8bec1f3499f9:GET:retrieve","backend-resource-6cfc8bec1f3499f9:DELETE:destroy"],"unresolvedViewset":false,"reviewStatus":"registered resource enumerated; behavioral review pending"}],"operations":[{"id":"backend-resource-6cfc8bec1f3499f9:POST:create","resourceId":"backend-resource-6cfc8bec1f3499f9","repository":"repositories/platform/mansoq-experience-be","boundary":"optional-plugin/local-service","method":"POST","path":"/api/{installed_plugin_prefix}/sandbox/","declaredPattern":"/api/{installed_plugin_prefix}/sandbox/","action":"create","viewset":"SandboxViewSet","classId":"repositories/platform/mansoq-experience-be:mansoq_experience_sandbox_be.api.viewsets.SandboxViewSet","detail":false,"allowedByDeclaredHttpMethods":true,"mountStatus":"plugin/local mount; actual prefix and enablement require deployment verification","routeEvidence":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/urls.py","line":14,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"handlerSource":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":40,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"registrationConditions":[],"evidenceKind":"declared/inherited method","methodEvidenceIds":["repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py:40:create"],"schemaIds":{},"classPermissionEvidence":[{"kind":"permission_classes","declaration":["IsSuperUser"],"source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":36,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"kind":"authentication_classes","declaration":["BasicAuthentication","SessionAuthentication"],"source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":35,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"filterEvidence":[],"reviewStatus":"static contract extracted; runtime/permission/payload behavior review pending","pathParameters":[{"name":"installed_plugin_prefix","in":"deployment mount","type":"deployment-selected mount prefix","required":true,"source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/urls.py","line":14,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}]},{"id":"backend-resource-6cfc8bec1f3499f9:GET:retrieve","resourceId":"backend-resource-6cfc8bec1f3499f9","repository":"repositories/platform/mansoq-experience-be","boundary":"optional-plugin/local-service","method":"GET","path":"/api/{installed_plugin_prefix}/sandbox/{external_id}/","declaredPattern":"/api/{installed_plugin_prefix}/sandbox/{external_id}/","action":"retrieve","viewset":"SandboxViewSet","classId":"repositories/platform/mansoq-experience-be:mansoq_experience_sandbox_be.api.viewsets.SandboxViewSet","detail":true,"allowedByDeclaredHttpMethods":true,"mountStatus":"plugin/local mount; actual prefix and enablement require deployment verification","routeEvidence":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/urls.py","line":14,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"handlerSource":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":64,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"registrationConditions":[],"evidenceKind":"declared/inherited method","methodEvidenceIds":["repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py:64:retrieve"],"schemaIds":{},"classPermissionEvidence":[{"kind":"permission_classes","declaration":["IsSuperUser"],"source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":36,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"kind":"authentication_classes","declaration":["BasicAuthentication","SessionAuthentication"],"source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":35,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"filterEvidence":[],"reviewStatus":"static contract extracted; runtime/permission/payload behavior review pending","pathParameters":[{"name":"installed_plugin_prefix","in":"deployment mount","type":"deployment-selected mount prefix","required":true,"source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/urls.py","line":14,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"name":"external_id","in":"path","type":"router lookup string; semantic ID validation requires handler/schema review","required":true,"source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/urls.py","line":14,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}]},{"id":"backend-resource-6cfc8bec1f3499f9:DELETE:destroy","resourceId":"backend-resource-6cfc8bec1f3499f9","repository":"repositories/platform/mansoq-experience-be","boundary":"optional-plugin/local-service","method":"DELETE","path":"/api/{installed_plugin_prefix}/sandbox/{external_id}/","declaredPattern":"/api/{installed_plugin_prefix}/sandbox/{external_id}/","action":"destroy","viewset":"SandboxViewSet","classId":"repositories/platform/mansoq-experience-be:mansoq_experience_sandbox_be.api.viewsets.SandboxViewSet","detail":true,"allowedByDeclaredHttpMethods":true,"mountStatus":"plugin/local mount; actual prefix and enablement require deployment verification","routeEvidence":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/urls.py","line":14,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"handlerSource":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":68,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"registrationConditions":[],"evidenceKind":"declared/inherited method","methodEvidenceIds":["repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py:68:destroy"],"schemaIds":{},"classPermissionEvidence":[{"kind":"permission_classes","declaration":["IsSuperUser"],"source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":36,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"kind":"authentication_classes","declaration":["BasicAuthentication","SessionAuthentication"],"source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":35,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"filterEvidence":[],"reviewStatus":"static contract extracted; runtime/permission/payload behavior review pending","pathParameters":[{"name":"installed_plugin_prefix","in":"deployment mount","type":"deployment-selected mount prefix","required":true,"source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/urls.py","line":14,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"name":"external_id","in":"path","type":"router lookup string; semantic ID validation requires handler/schema review","required":true,"source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/urls.py","line":14,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}]}],"methodEvidence":[{"id":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py:40:create","name":"create","owner":"repositories/platform/mansoq-experience-be:mansoq_experience_sandbox_be.api.viewsets.SandboxViewSet","summary":"","source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":40,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[{"name":"is_facility_empty","in":"query","type":"not declared at read site","required":"not established","readStyle":"get","dynamicName":false,"source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":42,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"name":"is_facility_empty","in":"body","type":"not declared at read site","required":"not established","readStyle":"get","dynamicName":false,"source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":43,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"name":"facility_name","in":"body","type":"not declared at read site","required":"not established","readStyle":"get","dynamicName":false,"source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":47,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"name":"facility_name","in":"query","type":"not declared at read site","required":"not established","readStyle":"get","dynamicName":false,"source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":48,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[{"value":null,"symbol":"status.HTTP_202_ACCEPTED","source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":60,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py:64:retrieve","name":"retrieve","owner":"repositories/platform/mansoq-experience-be:mansoq_experience_sandbox_be.api.viewsets.SandboxViewSet","summary":"","source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":64,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py:68:destroy","name":"destroy","owner":"repositories/platform/mansoq-experience-be:mansoq_experience_sandbox_be.api.viewsets.SandboxViewSet","summary":"","source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":68,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[{"value":null,"symbol":"status.HTTP_204_NO_CONTENT","source":{"path":"repositories/platform/mansoq-experience-be/src/mansoq_experience_sandbox_be/api/viewsets.py","line":73,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"}],"schemas":[],"frameworkSettings":[]},"frontend":{"operations":[],"schemas":[]},"services":{"operations":[]},"boundaries":[]}