swarming: allow privileged users to schedule high priority tasks

appengine/swarming/handlers_endpoints.py

 # Copyright 2015 The LUCI Authors. All rights reserved.
 # Use of this source code is governed under the Apache License, Version 2.0
 # that can be found in the LICENSE file.
 
 """This module defines Swarming Server endpoints handlers."""
 
 import datetime
 import logging
 import os
 
@@ skipping 326 matching lines @@
     earliest opportunity by a bot that has at least the dimensions as described
     in the task request.
     """
     logging.info('%s', request)
 
     try:
       request, secret_bytes = message_conversion.new_task_request_from_rpc(
           request, utils.utcnow())
       apply_property_defaults(request.properties)
       task_request.init_new_request(
-          request, acl.is_bot_or_admin(), secret_bytes)
+          request, acl.can_schedule_high_priority_tasks(), secret_bytes)
     except (datastore_errors.BadValueError, TypeError, ValueError) as e:
       raise endpoints.BadRequestException(e.message)
 
     result_summary = task_scheduler.schedule_request(request, secret_bytes)
 
     previous_result = None
     if result_summary.deduped_from:
       previous_result = message_conversion.task_result_to_rpc(
           result_summary, False)
 
@@ skipping 237 matching lines @@
     # TODO(maruel): Disallow a terminate task when there's one currently
     # pending or if the bot is considered 'dead', e.g. no contact since 10
     # minutes.
     logging.info('%s', request)
     bot_id = unicode(request.bot_id)
     bot_key = bot_management.get_info_key(bot_id)
     get_or_raise(bot_key)  # raises 404 if there is no such bot
     try:
       # Craft a special priority 0 task to tell the bot to shutdown.
       request = task_request.create_termination_task(
-          bot_id, acl.is_bot_or_admin())
+          bot_id, acl.can_schedule_high_priority_tasks())
     except (datastore_errors.BadValueError, TypeError, ValueError) as e:
       raise endpoints.BadRequestException(e.message)
 
     result_summary = task_scheduler.schedule_request(request, None)
     return swarming_rpcs.TerminateResponse(
         task_id=task_pack.pack_result_summary_key(result_summary.key))
 
   @gae_ts_mon.instrument_endpoint()
   @auth.endpoints_method(
       BotTasksRequest, swarming_rpcs.BotTasks,
@@ skipping 114 matching lines @@
 def get_routes():
   return (
     endpoints_webapp2.api_routes(SwarmingServerService) +
     endpoints_webapp2.api_routes(SwarmingTaskService) +
     endpoints_webapp2.api_routes(SwarmingTasksService) +
     endpoints_webapp2.api_routes(SwarmingBotService) +
     endpoints_webapp2.api_routes(SwarmingBotsService) +
     # components.config endpoints for validation and configuring of luci-config
     # service URL.
     endpoints_webapp2.api_routes(config.ConfigApi))