tree 23f75d34948206489a3887f56d9fdd328e230886
parent 21e91dfd3b5b1a4be82dc585824449c9d876468d
author Ivan Pilat <ivanpi@google.com> 1468878206 -0700
committer Ivan Pilat <ivanpi@google.com> 1468878206 -0700

syncbase: Enforce ACL spec on sync RPCs.

Syncgroup Manager RPCs now check permissions according to the Syncbase
ACL specification document, including recursively checking for Resolve
access where appropriate.
Documented status of Syncbase-to-Syncbase RPC permissions better.
Added other sanity checks - Collection existence and Read permission at
syncgroup create/join, prevent removing self from syncgroup ACL.
Added permission spec tests for client-to-Syncbase Syncgroup Manager and
Blob RPCs.

MultiPart: 1/2
Change-Id: I22cdb663440d2d8d39bc06a669de44d3d0c491b2