Align documentation and code for /status endpoint

Author: toothstone

compliance-monitor/README.md

@@ -183,23 +183,17 @@ The final field is the desired state; the other fields are used to determine the
 (within one report, version and check uniquely determine a result; the scope is given here as well
 in case reports at some point contain multiple scopes).
 
-### GET /status/{subject}
+### GET /status
 
-Returns the current status of the subject. Use the `Accept` header to select desired content type:
-
-- `text/html` (default): a snippet of HTML suitable for the end user;
-- `image/png`: a PNG image of a badge;
-- `application/json`: a short summary in JSON format.
+Returns the current status of all subjects in JSON format.
+The request needs to be authenticated via basic auth, either with the role `read_any` for all subjects,
+or for the requested subject.
 
 Query parameters:
 
+- `subject` (optional): restrict subject
 - `scopeuuid` (optional): restrict scope
-- `version` (optional): restrict version
-- `privileged_view` (optional `0` or `1`, default `0`): request privileged view (see below)
-
-If the privileged view is requested, then this request needs to be authenticated (via basic auth),
-either for the same subject or for some account with role `read_any`. This view will immediately
-show any non-pass result, whereas otherwise, such a result needs to be verified manually.
+- `version` (optional): restrict version (Currently broken)
 
 ### GET /metrics/{subject}
 

compliance-monitor/monitor.py

@@ -553,7 +553,6 @@ async def get_status(
     subject: str = None, scopeuuid: str = None, version: str = None,
 ):
     check_role(account, subject, ROLES['read_any'])
-    # note: text/html will be the default, but let's start with json to get the logic right
     accept = request.headers['accept']
     if 'application/json' not in accept and '*/*' not in accept:
         # see https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/406