From 6f8dc22ffd6abb3ffaa29db3c0919b9d404f1900 Mon Sep 17 00:00:00 2001
From: Pierre-Yves Chibon <pingou@pingoured.fr>
Date: Dec 22 2016 14:07:17 +0000
Subject: Create an ``issue_update`` ACLs allowing to do multiple type of updates at once


---

diff --git a/pagure/api/issue.py b/pagure/api/issue.py
index 41ed130..42b6685 100644
--- a/pagure/api/issue.py
+++ b/pagure/api/issue.py
@@ -536,7 +536,7 @@ def api_view_issue_comment(
 @API.route(
     '/fork/<username>/<namespace>/<repo>/issue/<int:issueid>/status',
     methods=['POST'])
-@api_login_required(acls=['issue_change_status'])
+@api_login_required(acls=['issue_change_status', 'issue_update'])
 @api_method
 def api_change_status_issue(repo, issueid, username=None, namespace=None):
     """
@@ -659,7 +659,7 @@ def api_change_status_issue(repo, issueid, username=None, namespace=None):
 @API.route(
     '/fork/<username>/<namespace>/<repo>/issue/<int:issueid>/comment',
     methods=['POST'])
-@api_login_required(acls=['issue_comment'])
+@api_login_required(acls=['issue_comment', 'issue_update'])
 @api_method
 def api_comment_issue(repo, issueid, username=None, namespace=None):
     """
@@ -758,7 +758,7 @@ def api_comment_issue(repo, issueid, username=None, namespace=None):
 @API.route(
     '/fork/<username>/<namespace>/<repo>/issue/<int:issueid>/assign',
     methods=['POST'])
-@api_login_required(acls=['issue_assign'])
+@api_login_required(acls=['issue_assign', 'issue_update'])
 @api_method
 def api_assign_issue(repo, issueid, username=None, namespace=None):
     """
diff --git a/pagure/default_config.py b/pagure/default_config.py
index edb8302..da90503 100644
--- a/pagure/default_config.py
+++ b/pagure/default_config.py
@@ -217,6 +217,7 @@ ACLS = {
     'pull_request_flag': 'Flag a pull-request of this project',
     'pull_request_merge': 'Merge a pull-request of this project',
     'issue_subscribe': 'Subscribe the user with this token to an issue',
+    'issue_update': 'Update an issue, status, comments, custom fields...',
 }
 
 # Bootstrap URLS