add a per-project rule to change CI checks

Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>

Author: mchehab

patchwork/api/check.py

@@ -108,7 +108,7 @@ class CheckListCreate(CheckMixin, ListCreateAPIView):
     lookup_url_kwarg = 'patch_id'
     ordering = 'id'
 
-    def is_editable(self, user):
+    def is_editable(self, user, patch):
         if not user.is_authenticated:
             return False
 
@@ -119,12 +119,16 @@ def is_editable(self, user):
             patch._edited_by = user
             return True
 
+        if user.has_perm('patchwork.add_check', patch.project):
+            patch._edited_by = user
+            return True
+
         # Being maintainer doesn't grant rights to create checks.
         return False
 
     def create(self, request, patch_id, *args, **kwargs):
         p = get_object_or_404(Patch, id=patch_id)
-        if not self.is_editable(request.user):
+        if not self.is_editable(request.user, p):
             raise PermissionDenied()
         request.patch = p
         return super(CheckListCreate, self).create(request, *args, **kwargs)

patchwork/models.py

@@ -121,6 +121,10 @@ class Meta:
         default_permissions = ()
         unique_together = (('listid', 'subject_match'),)
         ordering = ['linkname']
+        permissions = [
+            # Per-project permission to add checks
+            ("add_check", "Can add checks"),
+        ]
 
 
 class DelegationRule(models.Model):