switch to django api

[denten]

django api should talk to mongo--mongo api is not robust enough

[jon-freed]

Clarity, please: What do you mean by "mongo api"? Do you mean the Sleepy Mongoose REST API that is referenced by MongoDB and that has been deployed already for OSP? Or something else, like the MongoDB driver for Python? And what functionality is desired?

[denten]

Yes, our security review revealed weaknesses in Sleepy Mongoose Rest interface. We want to be able to filter by fields (expose certain fields, while hiding others, read only access, etc). The solution was to talk to Mongo through Django. We are doing this in-house, therefore my notes are sparse.