[scheduler]: ACLs phase 1 - per Job ACL specification and enforcement.

scheduler/appengine/ui/invocation.go

 // Copyright 2015 The LUCI Authors.
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
 // You may obtain a copy of the License at
 //
 //      http://www.apache.org/licenses/LICENSE-2.0
 //
 // Unless required by applicable law or agreed to in writing, software
 // distributed under the License is distributed on an "AS IS" BASIS,
@@ skipping 34 matching lines @@
 
         wg := sync.WaitGroup{}
         wg.Add(1)
         go func() {
                 defer wg.Done()
                 inv, err1 = eng.GetInvocation(c.Context, projectID+"/"+jobName, invID)
         }()
         wg.Add(1)
         go func() {
                 defer wg.Done()
-                job, err2 = eng.GetJob(c.Context, projectID+"/"+jobName)
+                job, err2 = eng.GetJobRA(c.Context, projectID+"/"+jobName)
         }()
         wg.Wait()
 
         // panic on internal datastore errors to trigger HTTP 500.
         switch {
         case err1 != nil:
                 panic(err1)
         case err2 != nil:
                 panic(err2)
         case inv == nil:
@@ skipping 32 matching lines @@
         invIDAsInt, err := strconv.ParseInt(invID, 10, 64)
         if err != nil {
                 http.Error(c.Writer, "Bad invocation ID", 400)
                 return
         }
         if err := cb(projectID+"/"+jobName, invIDAsInt); err != nil {
                 panic(err)
         }
         http.Redirect(c.Writer, c.Request, fmt.Sprintf("/jobs/%s/%s/%s", projectID, jobName, invID), http.StatusFound)
 }