config_service: implement admin group

appengine/config_service/acl_test.py

Index: appengine/config_service/acl_test.py
diff --git a/appengine/config_service/acl_test.py b/appengine/config_service/acl_test.py
index d73c311c3e52242af45e1b45fd34b19886925c7f..e7b38bac07c92eca5d14fba6276c83cb7275c7f8 100755
--- a/appengine/config_service/acl_test.py
+++ b/appengine/config_service/acl_test.py
@@ -33,7 +33,6 @@ class AclTestCase(test_case.TestCase):
     super(AclTestCase, self).setUp()
     self.mock(auth, 'get_current_identity', mock.Mock())
     auth.get_current_identity.return_value = auth.Anonymous
-    self.mock(auth, 'is_admin', lambda *_: False)
     self.mock(auth, 'is_group_member', mock.Mock(return_value=False))
     self.mock(
         services, 'get_services_async', mock.Mock(return_value=future([])))
@@ -45,7 +44,7 @@ class AclTestCase(test_case.TestCase):
     self.mock(storage, 'get_self_config_async', lambda *_: future(acl_cfg))
 
   def test_admin_can_read_all(self):
-    self.mock(auth, 'is_admin', mock.Mock(return_value=True))
+    self.mock(acl, 'is_admin', mock.Mock(return_value=True))
     self.assertTrue(can_read_config_set('services/swarming'))
     self.assertTrue(can_read_config_set('projects/chromium'))
     self.assertTrue(has_project_access('chromium'))