Milo: ACLs for internal swarm jobs

milo/appengine/swarming/html_data.go

 // Copyright 2015 The LUCI Authors. All rights reserved.
 // Use of this source code is governed under the Apache License, Version 2.0
 // that can be found in the LICENSE file.
 
 package swarming
 
 import (
         "encoding/json"
         "fmt"
         "io/ioutil"
         "path/filepath"
         "sort"
         "strings"
         "time"
 
         "github.com/golang/protobuf/proto"
         "github.com/luci/gae/impl/memory"
         "golang.org/x/net/context"
         "google.golang.org/grpc"
 
         swarming "github.com/luci/luci-go/common/api/swarming/swarming/v1"
         "github.com/luci/luci-go/common/clock/testclock"
+        memcfg "github.com/luci/luci-go/common/config/impl/memory"
         "github.com/luci/luci-go/common/errors"
         miloProto "github.com/luci/luci-go/common/proto/milo"
         "github.com/luci/luci-go/logdog/api/endpoints/coordinator/logs/v1"
         "github.com/luci/luci-go/logdog/api/logpb"
         "github.com/luci/luci-go/logdog/client/coordinator"
+        "github.com/luci/luci-go/luci_config/server/cfgclient/backend/testconfig"
         "github.com/luci/luci-go/milo/api/resp"
         "github.com/luci/luci-go/milo/appengine/common"
+        "github.com/luci/luci-go/server/auth"
+        "github.com/luci/luci-go/server/auth/authtest"
         "github.com/luci/luci-go/server/templates"
 )
 
 type testCase struct {
         name string
 
         swarmResult string
         swarmOutput string
         annotations string
 }
@@ skipping 198 matching lines @@
                         Duration: time.Second,
                 },
         }
         results := []common.TestBundle{
                 {
                         Description: "Basic successful build",
                         Data:        templates.Args{"Build": basic},
                 },
         }
         c := context.Background()
+        c = memory.UseWithAppID(c, "dev~luci-milo")
+        c = testconfig.WithCommonClient(c, memcfg.New(aclConfgs))
+        c = auth.WithState(c, &authtest.FakeState{
+                Identity:       "user:alicebob@google.com",
+                IdentityGroups: []string{"all", "googlers"},
+        })
         c, _ = testclock.UseTime(c, time.Date(2016, time.March, 14, 11, 0, 0, 0, time.UTC))
-        c = memory.Use(c)
 
         for _, tc := range getTestCases() {
                 svc := debugSwarmingService{tc}
                 bl := buildLoader{
                         logDogClientFunc: logDogClientFunc(tc),
                 }
 
                 build, err := bl.swarmingBuildImpl(c, svc, "foo", tc.name)
                 if err != nil {
                         panic(fmt.Errorf("Error while processing %s: %s", tc.name, err))
                 }
                 results = append(results, common.TestBundle{
                         Description: tc.name,
                         Data:        templates.Args{"Build": build},
                 })
         }
         return results
 }
+
+var secretProjectCfg = `
+name: "secret"
+access: "group:googlers"
+`
+
+var publicProjectCfg = `
+name: "opensource"
+access: "group:all"
+`
+
+var aclConfgs = map[string]memcfg.ConfigSet{
+        "projects/secret": {
+                "project.cfg": secretProjectCfg,
+        },
+        "projects/opensource": {
+                "project.cfg": publicProjectCfg,
+        },
+}