config_service: implement admin group

appengine/config_service/api.py

 # Copyright 2015 The LUCI Authors. All rights reserved.
 # Use of this source code is governed under the Apache License, Version 2.0
 # that can be found in the LICENSE file.
 
 import logging
 
 from google.appengine.api import memcache
 from google.appengine.ext import ndb
 from protorpc import messages
 from protorpc import message_types
@@ skipping 355 matching lines @@
     endpoints.ResourceContainer(
         message_types.VoidMessage,
         config_set=messages.StringField(1, required=True)
     ),
     message_types.VoidMessage,
     http_method='POST',
     path='reimport')
   @auth.public # ACL check inside
   def reimport(self, request):
     """Reimports a config set."""
-    if not auth.is_admin():
+    if not acl.is_admin():
       raise endpoints.ForbiddenException('Only admins are allowed to do this')
     # Assume it is Gitiles.
     try:
       gitiles_import.import_config_set(request.config_set)
       return message_types.VoidMessage()
     except gitiles_import.NotFoundError as e:
       raise endpoints.NotFoundException(e.message)
     except ValueError as e:
       raise endpoints.BadRequestException(e.message)
     except gitiles_import.Error as e:
@@ skipping 106 matching lines @@
 
 def can_read_config_sets(config_sets):
   try:
     return acl.can_read_config_sets(config_sets)
   except ValueError as ex:
     raise endpoints.BadRequestException(ex.message)
 
 
 def can_read_config_set(config_set):
   return can_read_config_sets([config_set]).get(config_set)