Add ValuesEditableBy support to github_organization_custom_properties

Author: markszabo

github/data_source_github_organization_custom_properties.go

@@ -40,6 +40,11 @@ func dataSourceGithubOrganizationCustomProperties() *schema.Resource {
 				Computed: true,
 				Elem:     &schema.Schema{Type: schema.TypeString},
 			},
+			"values_editable_by": {
+				Type:     schema.TypeString,
+				Optional: true,
+				Computed: true,
+			},
 		},
 	}
 }
@@ -66,6 +71,7 @@ func dataSourceGithubOrganizationCustomPropertiesRead(d *schema.ResourceData, me
 	_ = d.Set("property_name", propertyAttributes.PropertyName)
 	_ = d.Set("required", propertyAttributes.Required)
 	_ = d.Set("value_type", propertyAttributes.ValueType)
+	_ = d.Set("values_editable_by", propertyAttributes.ValuesEditableBy)
 
 	return nil
 }

github/resource_github_organization_custom_properties.go

@@ -59,6 +59,12 @@ func resourceGithubOrganizationCustomProperties() *schema.Resource {
 				Computed:    true,
 				Elem:        &schema.Schema{Type: schema.TypeString},
 			},
+			"values_editable_by": {
+				Description: "Who can edit the values of the custom property. Can be one of 'org_actors' or 'org_and_repo_actors'. If not specified, the default is 'org_actors' (only organization owners can edit values)",
+				Type:        schema.TypeString,
+				Optional:    true,
+				Computed:    true,
+			},
 		},
 	}
 }
@@ -79,14 +85,22 @@ func resourceGithubCustomPropertiesCreate(d *schema.ResourceData, meta any) erro
 		allowedValuesString = append(allowedValuesString, v.(string))
 	}
 
-	customProperty, _, err := client.Organizations.CreateOrUpdateCustomProperty(ctx, ownerName, d.Get("property_name").(string), &github.CustomProperty{
+	customProperty := &github.CustomProperty{
 		PropertyName:  &propertyName,
 		ValueType:     valueType,
 		Required:      &required,
 		DefaultValue:  &defaultValue,
 		Description:   &description,
 		AllowedValues: allowedValuesString,
-	})
+	}
+
+	// Set ValuesEditableBy if provided
+	if valuesEditableBy, ok := d.GetOk("values_editable_by"); ok {
+		valuesEditableByStr := valuesEditableBy.(string)
+		customProperty.ValuesEditableBy = &valuesEditableByStr
+	}
+
+	customProperty, _, err := client.Organizations.CreateOrUpdateCustomProperty(ctx, ownerName, d.Get("property_name").(string), customProperty)
 	if err != nil {
 		return err
 	}
@@ -112,6 +126,7 @@ func resourceGithubCustomPropertiesRead(d *schema.ResourceData, meta any) error
 	_ = d.Set("property_name", customProperty.PropertyName)
 	_ = d.Set("required", customProperty.Required)
 	_ = d.Set("value_type", customProperty.ValueType)
+	_ = d.Set("values_editable_by", customProperty.ValuesEditableBy)
 
 	return nil
 }

github/resource_github_organization_custom_properties_test.go

@@ -151,4 +151,51 @@ func TestAccGithubOrganizationCustomProperties(t *testing.T) {
 			testCase(t, organization)
 		})
 	})
+
+	t.Run("creates custom property with values_editable_by without error", func(t *testing.T) {
+		config := `
+		resource "github_organization_custom_properties" "test" {
+			property_name       = "TestValuesEditableBy"
+			value_type          = "string"
+			required            = false
+			description         = "Test property for values_editable_by"
+			values_editable_by  = "org_and_repo_actors"
+		}`
+
+		check := resource.ComposeTestCheckFunc(
+			resource.TestCheckResourceAttr(
+				"github_organization_custom_properties.test",
+				"property_name", "TestValuesEditableBy",
+			),
+			resource.TestCheckResourceAttr(
+				"github_organization_custom_properties.test",
+				"values_editable_by", "org_and_repo_actors",
+			),
+		)
+
+		testCase := func(t *testing.T, mode string) {
+			resource.Test(t, resource.TestCase{
+				PreCheck:  func() { skipUnlessMode(t, mode) },
+				Providers: testAccProviders,
+				Steps: []resource.TestStep{
+					{
+						Config: config,
+						Check:  check,
+					},
+				},
+			})
+		}
+
+		t.Run("with an anonymous account", func(t *testing.T) {
+			t.Skip("anonymous account not supported for this operation")
+		})
+
+		t.Run("with an individual account", func(t *testing.T) {
+			t.Skip("individual account not supported for this operation")
+		})
+
+		t.Run("with an organization account", func(t *testing.T) {
+			testCase(t, organization)
+		})
+	})
 }

website/docs/d/organization_custom_properties.html.markdown

@@ -35,4 +35,6 @@ The following arguments are supported:
 
 * `default_value` - The default value of the custom property.
 
-* `allowed_values` - List of allowed values for the custom property. Only populated when `value_type` is `single_select` or `multi_select`.
+* `allowed_values` - List of allowed values for the custom property. Only populated when `value_type` is `single_select` or `multi_select`.
+
+* `values_editable_by` - Who can edit the values of the custom property. Can be one of `org_actors` or `org_and_repo_actors`.

website/docs/r/organization_custom_properties.html.markdown

@@ -28,6 +28,20 @@ resource "github_organization_custom_properties" "environment" {
 }
 ```
 
+## Example Usage - Allow Repository Actors to Edit
+
+This example shows how to allow repository administrators to edit the property values:
+
+```hcl
+resource "github_organization_custom_properties" "team_contact" {
+  property_name       = "team_contact"
+  value_type          = "string"
+  required            = false
+  description         = "Contact information for the team managing this repository"
+  values_editable_by  = "org_and_repo_actors"
+}
+```
+
 ## Example Usage - Text Property
 
 ```hcl
@@ -67,6 +81,8 @@ The following arguments are supported:
 
 * `allowed_values` - (Optional) List of allowed values for the custom property. Only applicable when `value_type` is `single_select` or `multi_select`.
 
+* `values_editable_by` - (Optional) Who can edit the values of the custom property. Can be one of `org_actors` or `org_and_repo_actors`. When set to `org_actors` (the default), only organization owners can edit the property values on repositories. When set to `org_and_repo_actors`, both organization owners and repository administrators with the custom properties permission can edit the values.
+
 ## Attributes Reference
 
 In addition to all arguments above, the following attributes are exported: