Add endpoint for permissions

appengine/swarming/handlers_endpoints.py

 # Copyright 2015 The LUCI Authors. All rights reserved.
 # Use of this source code is governed under the Apache License, Version 2.0
 # that can be found in the LICENSE file.
 
 """This module defines Swarming Server endpoints handlers."""
 
 import datetime
 import logging
 
 from google.appengine.api import datastore_errors
@@ skipping 119 matching lines @@
   @auth.endpoints_method(
       message_types.VoidMessage, swarming_rpcs.ServerDetails,
       http_method='GET')
   @auth.require(acl.is_bot_or_user)
   def details(self, _request):
     """Returns information about the server."""
     return swarming_rpcs.ServerDetails(server_version=utils.get_app_version())
 
   @gae_ts_mon.instrument_endpoint()
   @auth.endpoints_method(
+      message_types.VoidMessage, swarming_rpcs.ServerPermissions,
+      http_method='GET')
+  @auth.public
+  def permissions(self, _request):
+    """Returns the caller's permissions."""
+    return swarming_rpcs.ServerPermissions(
+        can_delete_bot = acl.is_admin(),
+        can_terminate_bot = acl.is_privileged_user(),
+        can_get_bootstrap_py = acl.is_user(),

[M-A Ruel, 2016/08/25 18:22:22]

bootstrap and bot_config are redundant

[kjlubick, 2016/08/25 19:33:37]

Consolidated to can_get_configs and can_put_configs

+        can_put_bootstrap_py = acl.is_admin(),
+        can_get_bot_config_py = acl.is_user(),
+        can_put_bot_config_py = acl.is_admin(),
+        can_cancel_task = acl.is_user(),
+        can_get_bootstrap_token = acl.is_bootstrapper(),
+      )
+
+  @gae_ts_mon.instrument_endpoint()
+  @auth.endpoints_method(
       VersionRequest, swarming_rpcs.FileContent,
       http_method='GET')
   @auth.require(acl.is_bot_or_user)
   def get_bootstrap(self, request):
     """Retrieves the current or a previous version of bootstrap.py."""
     obj = bot_code.get_bootstrap('', '', request.version)
     if not obj:
       return swarming_rpcs.FileContent()
     return swarming_rpcs.FileContent(
         content=obj.content.decode('utf-8'),
@@ skipping 548 matching lines @@
 def get_routes():
   return (
     endpoints_webapp2.api_routes(SwarmingServerService) +
     endpoints_webapp2.api_routes(SwarmingTaskService) +
     endpoints_webapp2.api_routes(SwarmingTasksService) +
     endpoints_webapp2.api_routes(SwarmingBotService) +
     endpoints_webapp2.api_routes(SwarmingBotsService) +
     # components.config endpoints for validation and configuring of luci-config
     # service URL.
     endpoints_webapp2.api_routes(config.ConfigApi))