swarming: allow privileged users to schedule high priority tasks

appengine/swarming/handlers_frontend.py

 # Copyright 2013 The LUCI Authors. All rights reserved.
 # Use of this source code is governed under the Apache License, Version 2.0
 # that can be found in the LICENSE file.
 
 """Main entry point for Swarming service.
 
 This file contains the URL handlers for all the Swarming service URLs,
 implemented using the webapp2 framework.
 """
 
@@ skipping 739 matching lines @@
   scheduled.
   """
 
   @auth.require(acl.is_user)
   def post(self, task_id):
     original_request, secret_bytes, _ = self.get_request_and_result(
         task_id, with_secret_bytes=True)
     # Retrying a task is essentially reusing the same task request as the
     # original one, but with new parameters.
     new_request = task_request.new_request_clone(
-        original_request, secret_bytes, allow_high_priority=acl.is_admin())
+        original_request, secret_bytes,
+        allow_high_priority=acl.can_schedule_high_priority_tasks())
     result_summary = task_scheduler.schedule_request(
       new_request, secret_bytes)
     self.redirect('/user/task/%s' % result_summary.task_id)
 
 
 ### Public pages.
 
 
 class OldUIHandler(auth.AuthenticatingHandler):
   @auth.public
@@ skipping 95 matching lines @@
 
   # If running on a local dev server, allow bots to connect without prior
   # groups configuration. Useful when running smoke test.
   if utils.is_local_dev_server():
     acl.bootstrap_dev_server_acls()
 
   routes.extend(handlers_backend.get_routes())
   routes.extend(handlers_bot.get_routes())
   routes.extend(handlers_endpoints.get_routes())
   return webapp2.WSGIApplication(routes, debug=debug)