Update '_access.update' to include existing values

cds/modules/deposit/api.py

@@ -500,11 +500,13 @@ def create(cls, data, id_=None, **kwargs):
         kwargs.setdefault("bucket_location", "videos")
         data["$schema"] = current_jsonschemas.path_to_url(cls._schema)
         data.setdefault("videos", [])
-        data.setdefault("_access", {})
         data.setdefault("_cds", {})
-        # Add the current user to the ``_access.update`` list
+        data.setdefault("_access", {})
+        access_update = data["_access"].setdefault("update", [])
         try:
-            data["_access"]["update"] = [current_user.email]
+            if  current_user.email not in access_update:
+                # Add the current user to the ``_access.update`` list
+                access_update.append(current_user.email)
         except AttributeError:
             current_app.logger.warning(
                 "No current user found, _access.update will stay empty."

tests/unit/test_project_rest.py

@@ -100,6 +100,7 @@ def assert_bucket_for_video(bucket_id, video):
         assert res.status_code == 201
         project_dict = json.loads(res.data.decode("utf-8"))
         assert project_dict["metadata"]["videos"] == []
+        assert User.query.get(users[0]).email in project_dict["metadata"]["_access"]["update"] 
         assert project_dict["metadata"]["title"]["title"] == "my project"
         assert project_dict["links"]["bucket"].startswith("http://localhost/files/")
         assert all(