tree 3832237f5b76e2b6a34add6d57f17d69c08d3acb
parent 058877d2ecc30ada505b1b720098fba5f44cbb0b
author Robert Kroeger <rjkroege@google.com> 1427147759 -0700
committer Robert Kroeger <rjkroege@google.com> 1427908960 +0000

services/mgmt/lib/acls: restructure the hierarchical authorizer for use by debug

The debug implementation uses the same authorizer over the lifetime of
the service. Modify the hierarchical authorizer to support monitoing
permission lists dynamically instead of requiring the creation of a
new Authorizer in each Lookup call.

Re-land with a modification: now makes the same number of attempts to
access the actual Permissions storage file as the upstream code. As a
result, this fixes a timing error in the Darwin integration tests.

Change-Id: Ib9defaa67554f95f7e64404f11fe36d4d9e39727