swarming: allow privileged users to schedule high priority tasks

appengine/swarming/server/acl.py

Index: appengine/swarming/server/acl.py
diff --git a/appengine/swarming/server/acl.py b/appengine/swarming/server/acl.py
index 1504c605e638dba07ef1fd0c203921da202a9aca..c78fadd1aca9c0dccbc650cb5dc3d4f403d9843d 100644
--- a/appengine/swarming/server/acl.py
+++ b/appengine/swarming/server/acl.py
@@ -18,6 +18,7 @@ ADMINS_GROUP = 'swarming-admins'
 PRIVILEGED_USERS_GROUP = 'swarming-privileged-users'
 USERS_GROUP = 'swarming-users'
 BOT_BOOTSTRAP_GROUP = 'swarming-bot-bootstrap'
+HIGH_PRIORITY_TASKS_GROUP = 'swarming-high-priority-task'

[Vadim Sh., 2016/10/28 19:48:44]

swarming-high-priority-tasks? (with 's')

I'm not very excited about the name but I can't think of a better alternative.

[nodir, 2016/10/28 20:00:13]

Done
 
yeah, me neither. Maybe maruel will have a better alternative

 
 
 def is_admin():
@@ -70,6 +71,11 @@ def is_bot_or_admin():
   return is_bot() or is_admin()
 
 
+def can_schedule_high_priority_tasks():
+  """Returns True if the current user can schedule high priority tasks."""
+  return is_bot_or_admin() or auth.is_group_member(HIGH_PRIORITY_TASKS_GROUP)
+
+
 def get_user_type():
   """Returns a string describing the current access control for the user."""
   if is_admin():