Teach CQ status app to check login status of users.

appengine/chromium_cq_status/shared/config.py

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import re
 
 AUTO_TAGGED_FIELDS = (
   'issue',
   'owner',
   'patchset',
@@ skipping 17 matching lines @@
 RIETVELD_TIMESTAMP_FORMATS = (
     '%Y-%m-%d %H:%M:%S.%f', '%Y-%m-%d %H:%M:%S.%f+00:00')
 STATS_START_TIMESTAMP = 374400 # 1970-01-05T00:00-0800 (midnight Monday PST)
 TAG_START = 'action=patch_start'
 TAG_STOP = 'action=patch_stop'
 TAG_PROJECT = 'project=%s'
 TAG_ISSUE = 'issue=%s'
 TAG_PATCHSET = 'patchset=%s'
 TAG_CODEREVIEW_HOSTNAME = 'codereview_hostname=%s'
 TRYJOBVERIFIER = 'try job'
-VALID_EMAIL_RE = re.compile(r'^.*@(chromium\.org|google\.com)$')
+
+# Maps hosts -> operation -> (either True means everyone or a regex on email).
+HOST_ACLS = {

[Sergiy Byelozyorov, 2016/07/01 17:13:06]

I'd remove everything but the actual production hosts, but up to you...

[tandrii(chromium), 2016/07/01 18:56:55]

Done.

+  'chromium-cq-status.appspot.com': {
+    'read': True,
+    'write': re.compile(r'^.*@(chromium\.org|google\.com)$'),
+  },
+  # TODO(tandrii): choose which one to deploy. See http://crbug.com/623614
+  'internal-cq-status.appspot.com': {
+    'read': re.compile(r'^.*@google\.com$'),
+    'write': re.compile(r'^.*@google\.com$'),
+  },
+  'chrome-cq-status.appspot.com': {
+    'read': re.compile(r'^.*@google\.com$'),
+    'write': re.compile(r'^.*@google\.com$'),
+  },
+  # TODO(tandrii): remove this.
+  'tandrii-test.appspot.com': {
+    'read': re.compile(r'^.*@google\.com$'),
+    'write': re.compile(r'^.*@google\.com$'),
+  },
+  # Special case for development and tests.
+  'Development': {
+    'read': True,
+    'write': re.compile(r'^.*@(chromium\.org|google\.com)$'),
+  },
+}