sliceplus support for site_allocation and network_ports for tenant view
diff --git a/planetstack/core/xoslib/methods/plus.py b/planetstack/core/xoslib/methods/plus.py
index 9ace688..ca89c79 100644
--- a/planetstack/core/xoslib/methods/plus.py
+++ b/planetstack/core/xoslib/methods/plus.py
@@ -1,4 +1,7 @@
+from rest_framework import generics
 from rest_framework import serializers
+from rest_framework.response import Response
+from rest_framework import status
 
 """ PlusSerializerMixin
 
@@ -22,3 +25,53 @@
     def getBackendHtml(self, obj):
         return obj.getBackendHtml()
 
+# XXX this is taken from genapi.py
+# XXX find a better way to re-use the code
+class PlusRetrieveUpdateDestroyAPIView(generics.RetrieveUpdateDestroyAPIView):
+
+    # To handle fine-grained field permissions, we have to check can_update
+    # the object has been updated but before it has been saved.
+
+    def update(self, request, *args, **kwargs):

+        partial = kwargs.pop('partial', False)

+        self.object = self.get_object_or_none()

+

+        serializer = self.get_serializer(self.object, data=request.DATA,

+                                         files=request.FILES, partial=partial)

+

+        if not serializer.is_valid():

+            response = {"error": "validation",

+                        "specific_error": "not serializer.is_valid()",

+                        "reasons": serializer.errors}

+            return Response(response, status=status.HTTP_400_BAD_REQUEST)

+

+        try:

+            self.pre_save(serializer.object)

+        except ValidationError as err:

+            # full_clean on model instance may be called in pre_save,

+            # so we have to handle eventual errors.

+            response = {"error": "validation",

+                         "specific_error": "ValidationError in pre_save",

+                         "reasons": err.message_dict}

+            return Response(response, status=status.HTTP_400_BAD_REQUEST)

+

+        if serializer.object is not None:

+            if not serializer.object.can_update(request.user):

+                return Response(status=status.HTTP_400_BAD_REQUEST)

+

+        if self.object is None:

+            self.object = serializer.save(force_insert=True)

+            self.post_save(self.object, created=True)

+            return Response(serializer.data, status=status.HTTP_201_CREATED)

+

+        self.object = serializer.save(force_update=True)

+        self.post_save(self.object, created=False)

+        return Response(serializer.data, status=status.HTTP_200_OK)
+
+    def destroy(self, request, *args, **kwargs):
+        obj = self.get_object()
+        if obj.can_update(request.user):
+            return super(generics.RetrieveUpdateDestroyAPIView, self).destroy(request, *args, **kwargs)
+        else:
+            return Response(status=status.HTTP_400_BAD_REQUEST)
+