tree aa59e299ef982c5b86473ea7c3cee84d8ccaf5d9
parent b5bd63ea4213c55a519bac4a61cb9cecb2cc8fcd
author Ivan Pilat <ivanpi@google.com> 1468265946 -0700
committer Ivan Pilat <ivanpi@google.com> 1468265946 -0700

syncbase: Authorization helpers for recursively checking Resolve.

Added helpers for authorization with verifying Resolve on all
ancestors and returning fuzzy errors (ErrNoExistOrNoAccess) when
caller is not authorized for Exists(). Authorization now uses
explicitly listed tags, providing more flexibility than RPC method
attached tags (e.g. allowing multiple tags, checking different tags
on Database and Collection, etc.).

Updated Exists() RPCs to use the new authorization helpers.
Expanded tests to cover Exists() permission checking. More tests
will be added in subsequent CLs to cover error fuzzifying.

MultiPart: 2/3
Change-Id: I9e77d36be0bda486a58111f3ed2313e8fc7b72ed