From d1b53468bd4bd45931796b6ceff9dd0fb29f7397 Mon Sep 17 00:00:00 2001
From: Frederick Muriuki Muriithi
Date: Wed, 22 Apr 2026 10:54:57 -0500
Subject: Add check for batch-edit privileges.

---
 gn_libs/privileges/resources.py | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/gn_libs/privileges/resources.py b/gn_libs/privileges/resources.py
index 07cad22..4b66c59 100644
--- a/gn_libs/privileges/resources.py
+++ b/gn_libs/privileges/resources.py
@@ -2,7 +2,7 @@
 import logging
 from functools import partial
 
-from .authspec import privileges_fulfill_specs
+from .authspec import check, privileges_fulfill_specs
 
 
 logger = logging.getLogger(__name__)
@@ -30,6 +30,14 @@ can_edit = partial(
         "  (AND system:resource:view system:resource:edit))"))
 
 
+def can_batch_edit(queried_privileges: tuple[str, ...]) -> bool:
+    """Check whether user has batch-editing privileges."""
+    return check(
+        ("(AND system:data:batch-edit system:system-wide:data:view"
+         "  system:system-wide:data:edit)"),
+        queried_privileges)
+
+
 can_create = partial(
     privileges_fulfill_specs,
     resource_spec=("(OR group:resource:create-resource "
-- 
cgit 1.4.1