config_service: implement admin group

config_service: implement admin group

Add "admin_group" to the acl config so that we can define a limited group that
has admin privileges on luci-config, not other services.

Also aggressively cache acl.cfg because it ~never changes

R=hinoka@chromium.org
BUG=730832
Review-Url: https://codereview.chromium.org/2932473005
Committed: https://github.com/luci/luci-py/commit/d3a810515f73c543eab2c1eb9db38a65f9d712e1

[nodir, 2017-06-08 18:16:21]

PTAL

[nodir, 2017-06-08 18:16:58]

Description was changed from

==========
config_service: implement admin group

Add "admin_group" to the acl config so that we can define a limited group that
has admin privileges on luci-config, not other services.

R=hinoka@chromium.org
BUG=730832
==========

to

==========
config_service: implement admin group

Add "admin_group" to the acl config so that we can define a limited group that
has admin privileges on luci-config, not other services.

Also aggressively cache acl.cfg because it ~never changes

R=hinoka@chromium.org
BUG=730832
==========

[Sergey Berezin, 2017-06-08 18:19:33]

sergeyberezin@chromium.org changed reviewers:
+ sergeyberezin@chromium.org

[Sergey Berezin, 2017-06-08 18:19:34]

LGTM, thanks!

[nodir, 2017-06-08 18:24:40]

The CQ bit was checked by nodir@chromium.org

[commit-bot: I haz the power, 2017-06-08 18:24:53]

CQ is trying da patch.

Follow status at:
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2017-06-08 18:27:04]

CQ is committing da patch.

Bot data: {"patchset_id": 20001, "attempt_start_ts": 1496946280374920,
"parent_rev": "bb34bc085032b88295f0215050c8735ea554b40b", "commit_rev":
"d3a810515f73c543eab2c1eb9db38a65f9d712e1"}

[commit-bot: I haz the power, 2017-06-08 18:27:08]

Description was changed from

==========
config_service: implement admin group

Add "admin_group" to the acl config so that we can define a limited group that
has admin privileges on luci-config, not other services.

Also aggressively cache acl.cfg because it ~never changes

R=hinoka@chromium.org
BUG=730832
==========

to

==========
config_service: implement admin group

Add "admin_group" to the acl config so that we can define a limited group that
has admin privileges on luci-config, not other services.

Also aggressively cache acl.cfg because it ~never changes

R=hinoka@chromium.org
BUG=730832

Review-Url: https://codereview.chromium.org/2932473005
Committed:
https://github.com/luci/luci-py/commit/d3a810515f73c543eab2c1eb9db38a65f9d712e1
==========

[commit-bot: I haz the power, 2017-06-08 18:27:09]

Committed patchset #2 (id:20001) as
https://github.com/luci/luci-py/commit/d3a810515f73c543eab2c1eb9db38a65f9d712e1