scheduler ACLs: fix ACLs saving upon job config change.

scheduler/appengine/acl/acl.go

 // Copyright 2017 The LUCI Authors.
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
 // You may obtain a copy of the License at
 //
 //      http://www.apache.org/licenses/LICENSE-2.0
 //
 // Unless required by applicable law or agreed to in writing, software
 // distributed under the License is distributed on an "AS IS" BASIS,
 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 // See the License for the specific language governing permissions and
 // limitations under the License.
 
 package acl
 
 import (
         "fmt"
         "regexp"
         "sort"
         "strings"
 
+        "golang.org/x/net/context"
+
         "github.com/luci/luci-go/common/data/stringset"
         "github.com/luci/luci-go/common/errors"
         "github.com/luci/luci-go/common/retry/transient"
         "github.com/luci/luci-go/scheduler/appengine/messages"
         "github.com/luci/luci-go/server/auth"
         "github.com/luci/luci-go/server/auth/identity"
-        "golang.org/x/net/context"
 )
 
 // GrantsByRole can answer questions who can READ and who OWNS the task.
 type GrantsByRole struct {
         Owners  []string `gae:",noindex"`
         Readers []string `gae:",noindex"`
 }
 
 func (g *GrantsByRole) IsOwner(c context.Context) (bool, error) {
         return hasGrant(c, g.Owners, groupsAdministrators)
@@ skipping 145 matching lines @@
                                 return true, nil
                         }
                 }
         }
         if isMember, err := auth.IsMember(c, groups...); err != nil {
                 return false, transient.Tag.Apply(err)
         } else {
                 return isMember, nil
         }
 }