tree 3746b060f72d9c2d774cfa9f0b0d7515a49860ec
parent 962c40fae7e6fe72a6306fec6474f05abf54c7c4
author Ivan Pilat <ivanpi@google.com> 1468972080 -0700
committer Ivan Pilat <ivanpi@google.com> 1468972080 -0700

syncbase: Enforce ACL spec on sync RPCs.

Syncgroup Manager RPCs now check permissions according to the Syncbase
ACL specification document, including recursively checking for Resolve
access where appropriate.
Documented status of Syncbase-to-Syncbase RPC permissions better.
Added other sanity checks - Collection existence and Read permission at
syncgroup create/join, prevent removing self from syncgroup ACL.
Added permission spec tests for client-to-Syncbase Syncgroup Manager and
Blob RPCs.

MultiPart: 2/2
Change-Id: Iac805e6801e0adfbfa6d6c206e7366d2b470ade4