[scheduler]: ACLs phase 1 - per Job ACL specification and enforcement.

scheduler/appengine/frontend/handler.go

Index: scheduler/appengine/frontend/handler.go
diff --git a/scheduler/appengine/frontend/handler.go b/scheduler/appengine/frontend/handler.go
index 99eb723e036575d5998c3ac38d6829eb48e4ebe5..abe548e528f434fbf9d426c87f49d86324c157f9 100644
--- a/scheduler/appengine/frontend/handler.go
+++ b/scheduler/appengine/frontend/handler.go
@@ -66,7 +66,7 @@ import (
 
 var (
 	globalCatalog catalog.Catalog
-	globalEngine  engine.Engine
+	globalEngine  engine.EngineInternal
 
 	// Known kinds of tasks.
 	managers = []task.Manager{
@@ -163,7 +163,7 @@ func init() {
 	gaemiddleware.InstallHandlersWithMiddleware(r, base)
 
 	ui.InstallHandlers(r, base, ui.Config{
-		Engine:        globalEngine,
+		Engine:        globalEngine.PublicAPI(),
 		Catalog:       globalCatalog,
 		TemplatesPath: "templates",
 	})
@@ -185,7 +185,7 @@ func init() {
 		UnaryServerInterceptor: grpcmon.NewUnaryServerInterceptor(nil),
 	}
 	scheduler.RegisterSchedulerServer(&api, apiservers.SchedulerServer{
-		Engine:  globalEngine,
+		Engine:  globalEngine.PublicAPI(),
 		Catalog: globalCatalog,
 	})
 	discovery.Enable(&api)