LogDog: Add prefix registration endpoint.

appengine/logdog/coordinator/auth.go

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 package coordinator
 
 import (
         "fmt"
         "strings"
 
@@ skipping 27 matching lines @@
         cfg, err := GetServices(c).Config(c)
         if err != nil {
                 return err
         }
         return checkMember(c, cfg.Coordinator.ServiceAuthGroup)
 }
 
 // IsProjectReader tests whether the current user belongs to one of the
 // project's declared reader groups.
 //
-// If the user is not a member of any groups, a MembershipError will be
+// If the user is not a member of any of the groups, a MembershipError will be
 // returned.
 func IsProjectReader(c context.Context, project luciConfig.ProjectName) error {
         pcfg, err := GetServices(c).ProjectConfig(c, project)
         if err != nil {
                 return err
         }
         return checkMember(c, pcfg.ReaderAuthGroups...)
 }
 
+// IsProjectWriter tests whether the current user belongs to one of the
+// project's declared writer groups.
+//
+// If the user is not a member of any of the groups, a MembershipError will be
+// returned.
+func IsProjectWriter(c context.Context, project luciConfig.ProjectName) error {
+        pcfg, err := GetServices(c).ProjectConfig(c, project)
+        if err != nil {
+                return err
+        }
+        return checkMember(c, pcfg.WriterAuthGroups...)
+}
+
 func checkMember(c context.Context, groups ...string) error {
         // On dev-appserver, the superuser has implicit group membership to
         // everything.
         if info.Get(c).IsDevAppServer() {
                 if u := auth.CurrentUser(c); u.Superuser {
                         log.Fields{
                                 "identity": u.Identity,
                                 "groups":   groups,
                         }.Infof(c, "Granting superuser implicit group membership on development server.")
                         return nil
@@ skipping 30 matching lines @@
 
 func (e *MembershipError) Error() string {
         return fmt.Sprintf("user %q is not a member of [%s]", e.Identity, strings.Join(e.Groups, ", "))
 }
 
 // IsMembershipError returns whether a given error is a membership error.
 func IsMembershipError(e error) bool {
         _, ok := e.(*MembershipError)
         return ok
 }