diff --git a/tests/integration/resources_permissions/test_userstories_resources.py b/tests/integration/resources_permissions/test_userstories_resources.py
index 578beff9..f01267e3 100644
--- a/tests/integration/resources_permissions/test_userstories_resources.py
+++ b/tests/integration/resources_permissions/test_userstories_resources.py
@@ -79,6 +79,9 @@ def data():
                                           default_points=m.private_points1)
     m.private_project1 = attach_project_extra_info(Project.objects.all()).get(id=m.private_project1.id)
 
+    m.private_sprint1 = f.MilestoneFactory.create(project=m.private_project1,
+                                                  owner=m.project_owner)
+
     m.private_points2 = f.PointsFactory()
     m.private_project2 = f.ProjectFactory(is_private=True,
                                           anon_permissions=[],
@@ -697,6 +700,28 @@ def test_user_story_action_bulk_update_order(client, data):
     assert results == [401, 403, 403, 451, 451]
 
 
+def test_user_story_action_bulk_update_milestone(client, data):
+    url = reverse('userstories-bulk-update-milestone')
+
+    users = [
+        None,
+        data.registered_user,
+        data.project_member_without_perms,
+        data.project_member_with_perms,
+        data.project_owner
+    ]
+
+    post_data = json.dumps({
+        "bulk_stories": [
+            {"us_id": data.private_user_story1.id, "order": 2}
+        ],
+        "milestone_id": data.private_sprint1.pk,
+        "project_id": data.private_project1.pk
+    })
+    results = helper_test_http_method(client, 'post', url, post_data, users)
+    assert results == [401, 403, 403, 204, 204]
+
+
 def test_user_story_action_upvote(client, data):
     public_url = reverse('userstories-upvote', kwargs={"pk": data.public_user_story.pk})
     private_url1 = reverse('userstories-upvote', kwargs={"pk": data.private_user_story1.pk})