Workflow API V2 Exposes All Workflows

[jkmarx]

Commit: f377cda

Steps to reproduce

-- In Django Swagger:

1. Locally http://192.168.50.50:8000/docs/#!/workflows/Workflow_list
   or
   https://refinery-dev.stemcellcommons.org/docs/#!/workflows/Workflow_list

Observed behavior

Workflow API2 allows all CRUD actions, unprotected.

Expected behavior

Which actions do we require?

[jkmarx]

@hackdna @ngehlenborg @scottx611x : It doesn't appear the front end is using this API, but I could be mistaken. Please comment on the expected behavior.

[hackdna]

The only allowed operation for APIs by default should be a GET.

[scottx611x]

I've gotten rid of the Workflow API v2 in one of my recent branches. We should have some discussion if it's worth keeping/upgrading it to DRF.

[ngehlenborg]

Can you please clarify why you would want to get rid of the API?

[scottx611x]

@nils sure, the api was updated to DRF to support a feature that never came into fruition. I believe #866

I figured if we are not working on this feature I could reimplement the v2 API once #866 comes back into the loop