validate only enum value for profileSchema

tracim/models/auth.py

@@ -96,6 +96,11 @@ class Profile(object):
              Group.TIM_MANAGER_GROUPNAME,
              Group.TIM_ADMIN_GROUPNAME]
 
+    _IDS = [Group.TIM_NOBODY,
+            Group.TIM_USER,
+            Group.TIM_MANAGER,
+            Group.TIM_ADMIN]
+
     # TODO - G.M - 18-04-2018 [Cleanup] Drop this
     # _LABEL = [l_('Nobody'),
     #           l_('Users'),

tracim/views/core_api/schemas.py

@@ -3,13 +3,14 @@ import marshmallow
 from marshmallow import post_load
 from marshmallow.validate import OneOf
 
+from tracim.models.auth import Profile
 from tracim.models.context_models import LoginCredentials
 from tracim.models.data import UserRoleInWorkspace
 
 
 class ProfileSchema(marshmallow.Schema):
-    id = marshmallow.fields.Int(dump_only=True)
-    slug = marshmallow.fields.String(attribute='name')
+    id = marshmallow.fields.Int(dump_only=True, validate=OneOf(Profile._IDS))
+    slug = marshmallow.fields.String(attribute='name', validate=OneOf(Profile._NAME))
 
 
 class UserSchema(marshmallow.Schema):