Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(391)

Side by Side Diff: appengine/machine_provider/acl.py

Issue 2692853012: Only allow explicitly whitelisted users to issue lease requests to Machine Provider (Closed)
Patch Set: Fix Created 3 years, 10 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « no previous file | appengine/machine_provider/handlers_endpoints_test.py » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 # Copyright 2015 The LUCI Authors. All rights reserved. 1 # Copyright 2015 The LUCI Authors. All rights reserved.
2 # Use of this source code is governed under the Apache License, Version 2.0 2 # Use of this source code is governed under the Apache License, Version 2.0
3 # that can be found in the LICENSE file. 3 # that can be found in the LICENSE file.
4 4
5 """Helper functions for working with ACLs.""" 5 """Helper functions for working with ACLs."""
6 6
7 import logging 7 import logging
8 8
9 from components import auth 9 from components import auth
10 from components.machine_provider import rpc_messages 10 from components.machine_provider import rpc_messages
(...skipping 34 matching lines...) Expand 10 before | Expand all | Expand 10 after
45 """Returns whether the current user is a recognized backend.""" 45 """Returns whether the current user is a recognized backend."""
46 return get_current_backend() is not None 46 return get_current_backend() is not None
47 47
48 48
49 def is_backend_service_or_catalog_admin(): 49 def is_backend_service_or_catalog_admin():
50 return is_backend_service() or is_catalog_admin() 50 return is_backend_service() or is_catalog_admin()
51 51
52 52
53 def can_issue_lease_requests(): 53 def can_issue_lease_requests():
54 """Returns whether the current user may issue lease requests.""" 54 """Returns whether the current user may issue lease requests."""
55 return is_logged_in() 55 return auth.is_group_member('machine-provider-users')
OLDNEW
« no previous file with comments | « no previous file | appengine/machine_provider/handlers_endpoints_test.py » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698