Add check for batch-edit privileges.

1 files changed, 9 insertions, 1 deletions

diff --git a/gn_libs/privileges/resources.py b/gn_libs/privileges/resources.py
index 07cad22..4b66c59 100644
--- a/gn_libs/privileges/resources.py
+++ b/gn_libs/privileges/resources.py
@@ -2,7 +2,7 @@
 import logging
 from functools import partial
 
-from .authspec import privileges_fulfill_specs
+from .authspec import check, privileges_fulfill_specs
 
 
 logger = logging.getLogger(__name__)
@@ -30,6 +30,14 @@ can_edit = partial(
         "  (AND system:resource:view system:resource:edit))"))
 
 
+def can_batch_edit(queried_privileges: tuple[str, ...]) -> bool:
+    """Check whether user has batch-editing privileges."""
+    return check(
+        ("(AND system:data:batch-edit system:system-wide:data:view"
+         "  system:system-wide:data:edit)"),
+        queried_privileges)
+
+
 can_create = partial(
     privileges_fulfill_specs,
     resource_spec=("(OR group:resource:create-resource "