--- a/ForgeTracker/forgetracker/main.py
+++ b/ForgeTracker/forgetracker/main.py
@@ -173,11 +173,13 @@
@expose()
def update_issue(self, **post_data):
- require(has_artifact_access('write'))
+ require(has_artifact_access('write', self.issue))
if request.method != 'POST':
raise Exception('update_issue must be a POST request')
self.issue.summary = post_data['summary']
self.issue.description = post_data['description']
+ self.issue.assigned_to = post_data['assigned_to']
+ self.issue.status = post_data['status']
redirect('edit')
class CommentController(object):