| OLD | NEW |
| 1 # Copyright 2014 The LUCI Authors. All rights reserved. | 1 # Copyright 2014 The LUCI Authors. All rights reserved. |
| 2 # Use of this source code is governed by the Apache v2.0 license that can be | 2 # Use of this source code is governed under the Apache License, Version 2.0 |
| 3 # found in the LICENSE file. | 3 # that can be found in the LICENSE file. |
| 4 | 4 |
| 5 """ACL checks for endpoints exposed by auth_service.""" | 5 """ACL checks for endpoints exposed by auth_service.""" |
| 6 | 6 |
| 7 from components import auth | 7 from components import auth |
| 8 from components.auth.ui import acl | 8 from components.auth.ui import acl |
| 9 | 9 |
| 10 | 10 |
| 11 def has_access(identity=None): | 11 def has_access(identity=None): |
| 12 """Returns True if current caller can access groups and other auth data.""" | 12 """Returns True if current caller can access groups and other auth data.""" |
| 13 return acl.has_access(identity) | 13 return acl.has_access(identity) |
| 14 | 14 |
| 15 | 15 |
| 16 def is_trusted_service(identity=None): | 16 def is_trusted_service(identity=None): |
| 17 """Returns True if caller is in 'auth-trusted-services' group.""" | 17 """Returns True if caller is in 'auth-trusted-services' group.""" |
| 18 return auth.is_group_member('auth-trusted-services', identity) | 18 return auth.is_group_member('auth-trusted-services', identity) |
| OLD | NEW |