OLD | NEW |
1 # Copyright 2014 The Swarming Authors. All rights reserved. | 1 # Copyright 2014 The LUCI Authors. All rights reserved. |
2 # Use of this source code is governed by the Apache v2.0 license that can be | 2 # Use of this source code is governed by the Apache v2.0 license that can be |
3 # found in the LICENSE file. | 3 # found in the LICENSE file. |
4 | 4 |
5 """ACL checks for endpoints exposed by auth_service.""" | 5 """ACL checks for endpoints exposed by auth_service.""" |
6 | 6 |
7 from components import auth | 7 from components import auth |
8 from components.auth.ui import acl | 8 from components.auth.ui import acl |
9 | 9 |
10 | 10 |
11 def has_access(identity=None): | 11 def has_access(identity=None): |
12 """Returns True if current caller can access groups and other auth data.""" | 12 """Returns True if current caller can access groups and other auth data.""" |
13 return acl.has_access(identity) | 13 return acl.has_access(identity) |
14 | 14 |
15 | 15 |
16 def is_trusted_service(identity=None): | 16 def is_trusted_service(identity=None): |
17 """Returns True if caller is in 'auth-trusted-services' group.""" | 17 """Returns True if caller is in 'auth-trusted-services' group.""" |
18 return auth.is_group_member('auth-trusted-services', identity) | 18 return auth.is_group_member('auth-trusted-services', identity) |
OLD | NEW |