swarming: allow privileged users to schedule high priority tasks

appengine/swarming/handlers_frontend.py

 # Copyright 2013 The LUCI Authors. All rights reserved.
 # Use of this source code is governed under the Apache License, Version 2.0
 # that can be found in the LICENSE file.
 
 """Main entry point for Swarming service.
 
 This file contains the URL handlers for all the Swarming service URLs,
 implemented using the webapp2 framework.
 """
 
@@ skipping 733 matching lines @@
   Retrying a task forcibly make it not idempotent so the task is unconditionally
   scheduled.
   """
 
   @auth.require(acl.is_user)
   def post(self, task_id):
     original_request, _ = self.get_request_and_result(task_id)
     # Retrying a task is essentially reusing the same task request as the
     # original one, but with new parameters.
     new_request = task_request.new_request_clone(
-        original_request, allow_high_priority=acl.is_admin())
+        original_request,
+        allow_high_priority=acl.can_schedule_high_priority_tasks())
     result_summary = task_scheduler.schedule_request(new_request)
     self.redirect('/user/task/%s' % result_summary.task_id)
 
 
 ### Public pages.
 
 
 class OldUIHandler(auth.AuthenticatingHandler):
   @auth.public
   def get(self):
@@ skipping 94 matching lines @@
 
   # If running on a local dev server, allow bots to connect without prior
   # groups configuration. Useful when running smoke test.
   if utils.is_local_dev_server():
     acl.bootstrap_dev_server_acls()
 
   routes.extend(handlers_backend.get_routes())
   routes.extend(handlers_bot.get_routes())
   routes.extend(handlers_endpoints.get_routes())
   return webapp2.WSGIApplication(routes, debug=debug)