Add API endpoints to create, list, get, and delete profiles globally and per team

[lukeheath]

Related user story

8360

Task

• [x] Create profile: POST /mdm/apple/profiles

• Body payload TBD during implementation.

• Accepts team_id query parameter to determine if applying to team or global.

• Only accepts .mobileconfig extension. No other validation necessary.

• Create activity item when a profile is created (see Figma in user story)

• [x] List profiles: GET /mdm/apple/profiles

• Response body TBD during implementation.

• Accepts team_id query parameter to determine if listing team profiles or global profiles.

• [x] Download profile: GET /mdm/apple/profiles/{profile_id}

• This will download in the browser.

• [x] Delete profile: DELETE /mdm/apple/profiles/{profile_id}

• Create activity item when a profile is deleted (see Figma in user story)

Figma

https://www.figma.com/file/hdALBDsrti77QuDNSzLdkx/%F0%9F%9A%A7-Fleet-EE-(dev-ready%2C-scratchpad)?node-id=10517%3A316027&t=gNbRhoIo5iC2OBaX-0

[lukeheath]

Hey team! Please add your planning poker estimate with Zenhub @gillespi314 @mna @roperzh

[roperzh]

Is there an API endpoint required to edit profiles? What does product mean in the user story when they say profiles are editable in the CLI? Does that just mean you can add/delete them via YAML?

@lukeheath there's no way to edit profiles in the UI so an API endpoint shouldn't be necessary. Editing via the CLI means that if a profile is provided with the same PayloadIdentifier of an existing one it is "replaced"

[lukeheath]

@roperzh Thanks for the clarification. I've removed the question from the description.

[noahtalerman]

@gillespi314 I added a new error state for when the user tries to add an encrypted profile: "Couldn’t upload. The file should be unencrypted."

For now, I'm assuming we're able to detect this case and show a specific error message.

Link to the UI in Figma is here: https://www.figma.com/file/hdALBDsrti77QuDNSzLdkx/%F0%9F%9A%A7-Fleet-EE-(dev-ready%2C-scratchpad)?node-id=13353%3A189397&t=qiR2INRpziFD2o9o-1

EDIT: I learned from Roberto that "unsigned" is different from "unencrypted"

Is "unsigned (unencrypted)" the correct language? Moreover, is unsigned the same as unencrypted?

I'm using "unsigned" language because the iMazing profile editor uses this language when the user saves a profile:

[noahtalerman]

@gillespi314 heads up, I edited the above error message for when a user tries to add an encrypted profile.

I learned from @roperzh that unsigned is not the same as unencrypted.

[fleet-release]

Simple management tools, Actions are easy and clear, Achieve more, faster.