Teach CQ status app to check login status of users.

appengine/chromium_cq_status/shared/config.py

Index: appengine/chromium_cq_status/shared/config.py
diff --git a/appengine/chromium_cq_status/shared/config.py b/appengine/chromium_cq_status/shared/config.py
index 2c8ce81560dc49b2f42df0c83adfd7b29668944c..2d1f6e3e04d108899469a12d4baeb4f51e16e13b 100644
--- a/appengine/chromium_cq_status/shared/config.py
+++ b/appengine/chromium_cq_status/shared/config.py
@@ -35,4 +35,30 @@ TAG_ISSUE = 'issue=%s'
 TAG_PATCHSET = 'patchset=%s'
 TAG_CODEREVIEW_HOSTNAME = 'codereview_hostname=%s'
 TRYJOBVERIFIER = 'try job'
-VALID_EMAIL_RE = re.compile(r'^.*@(chromium\.org|google\.com)$')
+
+# Maps hosts -> operation -> (either True means everyone or a regex on email).
+HOST_ACLS = {

[Sergiy Byelozyorov, 2016/07/01 17:13:06]

I'd remove everything but the actual production hosts, but up to you...

[tandrii(chromium), 2016/07/01 18:56:55]

Done.

+  'chromium-cq-status.appspot.com': {
+    'read': True,
+    'write': re.compile(r'^.*@(chromium\.org|google\.com)$'),
+  },
+  # TODO(tandrii): choose which one to deploy. See http://crbug.com/623614
+  'internal-cq-status.appspot.com': {
+    'read': re.compile(r'^.*@google\.com$'),
+    'write': re.compile(r'^.*@google\.com$'),
+  },
+  'chrome-cq-status.appspot.com': {
+    'read': re.compile(r'^.*@google\.com$'),
+    'write': re.compile(r'^.*@google\.com$'),
+  },
+  # TODO(tandrii): remove this.
+  'tandrii-test.appspot.com': {
+    'read': re.compile(r'^.*@google\.com$'),
+    'write': re.compile(r'^.*@google\.com$'),
+  },
+  # Special case for development and tests.
+  'Development': {
+    'read': True,
+    'write': re.compile(r'^.*@(chromium\.org|google\.com)$'),
+  },
+}