Endpoint for device search

[kengu]

GDPR requires us to limit access to devices that have positions.

As-is

Endpoint GET api/devices returns all known devices regardless of role-claim

To-be

• Restrict endpoint GET api/devices to role-claim admin
• Add endpoint OPTIONS api/devices/search restricted to default role-claim
• Returns header x-search-options: max-radius x; (in kilometers with desimals)
• Add endpoint GET api/devices/search restricted to default role-claim
• Supports search for devices with position within given radius from one search point (circle)
• Supports search for devices with position within given radius from two search points (ellipsis)
• Supports search for devices allocated to given operation
• Supports search for devices allocated to given unit
• Supports search for devices allocated to given personnel
• Support OR and AND between operations above

References

• OPTIONS method
• Check if a point is within an ellipse
• Ellipse notation
• GeoJSON circle/ellipse equivalent
• Relational functions
• JTS for dart