tree 9c3e9eef5a96dc44c748061b304102321aae1cde
parent a791c39c089039b5924984ce7602e05ec49a1991
author Tilak Sharma <tilaks@google.com> 1412725191 -0700
committer Tilak Sharma <tilaks@google.com> 1412804319 -0700

veyron2/services/mounttable, veyron2/services/watch: Resolve label for Glob.

Glob returns an entry that exactly matches the pattern only if the
principal has some access to the entry, and read or resolve access to
the parent entry. However, if the pattern expands an entry "p" (e.g.
"p/*", "p/...", "p/[abc]"), Glob returns child entries only if the
principal has read access to "p".
In summary, the principal must have at least resolve access to call Glob
but may require additional access for certain patterns.

Change-Id: Icff5ab1677fe64deaecbe913f0f2c0167897e270