[scheduler]: ACLs phase 1 - per Job ACL specification and enforcement.

scheduler/appengine/ui/job.go

 // Copyright 2015 The LUCI Authors.
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
 // You may obtain a copy of the License at
 //
 //      http://www.apache.org/licenses/LICENSE-2.0
 //
 // Unless required by applicable law or agreed to in writing, software
 // distributed under the License is distributed on an "AS IS" BASIS,
@@ skipping 19 matching lines @@
 )
 
 func jobPage(ctx *router.Context) {
         c, w, r, p := ctx.Context, ctx.Writer, ctx.Request, ctx.Params
 
         projectID := p.ByName("ProjectID")
         jobName := p.ByName("JobName")
         cursor := r.URL.Query().Get("c")
 
         // Grab the job from the datastore.
-        job, err := config(c).Engine.GetJob(c, projectID+"/"+jobName)
+        job, err := config(c).Engine.GetJobRA(c, projectID+"/"+jobName)
         if err != nil {
                 panic(err)
         }
         if job == nil {
                 http.Error(w, "No such job", http.StatusNotFound)
                 return
         }
 
         // Grab latest invocations from the datastore.
         invs, nextCursor, err := config(c).Engine.ListInvocations(c, job.JobID, 50, cursor)
@@ skipping 132 matching lines @@
         jobName := c.Params.ByName("JobName")
         if !acl.IsJobOwner(c.Context, projectID, jobName) {
                 http.Error(c.Writer, "Forbidden", 403)
                 return
         }
         if err := cb(projectID + "/" + jobName); err != nil {
                 panic(err)
         }
         http.Redirect(c.Writer, c.Request, fmt.Sprintf("/jobs/%s/%s", projectID, jobName), http.StatusFound)
 }