tree b00a88ed39f351edcb43a2a3c8afe239a919a03e
parent 331e0ffff53af78cf5a3316656f40494d1b57a0f
author Ivan Pilat <ivanpi@google.com> 1467384034 -0700
committer Ivan Pilat <ivanpi@google.com> 1467384034 -0700

syncbase: Authorization helpers for recursively checking Resolve.

Added helpers for authorization with verifying Resolve on all
ancestors and returning fuzzy errors (ErrNoExistOrNoAccess) when
caller is not authorized for Exists(). Authorization now uses
explicitly listed tags, providing more flexibility than RPC method
attached tags (e.g. allowing multiple tags, checking different tags
on Database and Collection, etc.).

Updated Exists() RPCs to use the new authorization helpers.
Expanded tests to cover Exists() permission checking. More tests
will be added in subsequent CLs to cover error fuzzifying.

MultiPart: 3/3
Change-Id: Ie6d22b6b3115e59a9506bc709dec1deb8442b31d