Update '_access.update' to include existing values

cds/modules/deposit/api.py

@@ -500,11 +500,13 @@ def create(cls, data, id_=None, **kwargs):
         kwargs.setdefault("bucket_location", "videos")
         data["$schema"] = current_jsonschemas.path_to_url(cls._schema)
         data.setdefault("videos", [])
-        data.setdefault("_access", {})
         data.setdefault("_cds", {})
-        # Add the current user to the ``_access.update`` list
+        data.setdefault("_access", {})
+        access_update = data["_access"].setdefault("update", [])
         try:
-            data["_access"]["update"] = [current_user.email]
+            if  current_user.email not in access_update:
+                # Add the current user to the ``_access.update`` list
+                access_update.append(current_user.email)
         except AttributeError:
             current_app.logger.warning(
                 "No current user found, _access.update will stay empty."

tests/unit/test_project_rest.py

@@ -85,6 +85,9 @@ def assert_bucket_for_video(bucket_id, video):
     video_schema = (
         "https://cds.cern.ch/schemas/" "deposits/records/videos/video/video-v1.0.0.json"
     )
+
+    project_deposit_metadata.setdefault("_access", {}).setdefault("update", [])
+    project_deposit_metadata["_access"]["update"].append("[email protected]")
 
     with api_app.test_client() as client:
         login_user(User.query.get(users[0]))
@@ -100,6 +103,8 @@ def assert_bucket_for_video(bucket_id, video):
         assert res.status_code == 201
         project_dict = json.loads(res.data.decode("utf-8"))
         assert project_dict["metadata"]["videos"] == []
+        assert User.query.get(users[0]).email in project_dict["metadata"]["_access"]["update"] 
+        assert "[email protected]" in project_dict["metadata"]["_access"]["update"] 
         assert project_dict["metadata"]["title"]["title"] == "my project"
         assert project_dict["links"]["bucket"].startswith("http://localhost/files/")
         assert all(