LogDog: Add prefix registration endpoint.

appengine/logdog/coordinator/auth.go

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 package coordinator
 
 import (
         "fmt"
         "strings"
 
@@ skipping 30 matching lines @@
 }
 
 // IsProjectReader tests whether the current user belongs to one of the
 // project's declared reader groups.
 //
 // If the user is not, a MembershipError will be returned.
 func IsProjectReader(c context.Context, pcfg *svcconfig.ProjectConfig) error {
         return checkMember(c, pcfg.ReaderAuthGroups...)
 }
 
+// IsProjectWriter tests whether the current user belongs to one of the
+// project's declared writer groups.
+//
+// If the user is not a member of any of the groups, a MembershipError will be
+// returned.
+func IsProjectWriter(c context.Context, pcfg *svcconfig.ProjectConfig) error {
+        return checkMember(c, pcfg.WriterAuthGroups...)
+}
+
 func checkMember(c context.Context, groups ...string) error {
         // On dev-appserver, the superuser has implicit group membership to
         // everything.
         if info.Get(c).IsDevAppServer() {
                 if u := auth.CurrentUser(c); u.Superuser {
                         log.Fields{
                                 "identity": u.Identity,
                                 "groups":   groups,
                         }.Infof(c, "Granting superuser implicit group membership on development server.")
                         return nil
@@ skipping 30 matching lines @@
 
 func (e *MembershipError) Error() string {
         return fmt.Sprintf("user %q is not a member of [%s]", e.Identity, strings.Join(e.Groups, ", "))
 }
 
 // IsMembershipError returns whether a given error is a membership error.
 func IsMembershipError(e error) bool {
         _, ok := e.(*MembershipError)
         return ok
 }