def add_issue(request, project_id):
form = IssueForm(**json.loads(request.body))
if not form.validate():
raise Http400
project = ProjectModel.get_by_id(long(project_id))
if project is None:
raise Http404
if request.user.permission != UserPermission.root and request.user.key().id() not in project.member_ids:
raise Http403
issue = IssueModel(
title=form.title.data,
floor=form.floor.data,
content=bleach.clean(
form.content.data,
tags=utils.get_bleach_allow_tags(),
attributes=utils.get_bleach_allow_attributes(),
styles=utils.get_bleach_allow_styles(),
),
label_ids=form.label_ids.data,
author=request.user,
project=project,
)
issue.put()
return JsonResponse(issue)
