veyron2/services/mounttable, veyron2/services/watch: Resolve label for Glob.
Glob returns an entry that exactly matches the pattern only if the
principal has some access to the entry, and read or resolve access to
the parent entry. However, if the pattern expands an entry "p" (e.g.
"p/*", "p/...", "p/[abc]"), Glob returns child entries only if the
principal has read access to "p".
In summary, the principal must have at least resolve access to call Glob
but may require additional access for certain patterns.
Change-Id: Icff5ab1677fe64deaecbe913f0f2c0167897e270
1 file changed
