luci-config: fine-grained acls

appengine/components/components/config/remote.py

Index: appengine/components/components/config/remote.py
diff --git a/appengine/components/components/config/remote.py b/appengine/components/components/config/remote.py
index d5c1883f45c74561c97192c8dae3ab9fecfbfa4e..0ec9a99f87e6199343bee713ace6313cd6cb9014 100644
--- a/appengine/components/components/config/remote.py
+++ b/appengine/components/components/config/remote.py
@@ -25,7 +25,6 @@ MEMCACHE_PREFIX = 'components.config/v1/'
 CONFIG_MAX_TIME_SINCE_LAST_ACCESS = datetime.timedelta(days=7)
 # Update LastGoodConfig.last_access_ts if it will be deleted next day.
 UPDATE_LAST_ACCESS_TIME_FREQUENCY = datetime.timedelta(days=1)
-EMAIL_SCOPE = 'https://www.googleapis.com/auth/userinfo.email'
 
 
 class LastGoodConfig(ndb.Model):
@@ -56,7 +55,7 @@ class Provider(object):
   def _api_call_async(self, path, allow_not_found=True, **kwargs):
     assert path
     url = 'https://%s/_ah/api/config/v1/%s' % (self.service_hostname, path)
-    kwargs.setdefault('scopes', EMAIL_SCOPE)
+    kwargs.setdefault('scopes', net.EMAIL_SCOPE)
     try:
       response = yield net.json_request_async(url, **kwargs)
       raise ndb.Return(response)