tree ed9c97a01404e3e1f4494e95573c2bc9fb12ecce
parent be7ccb959d1795f5e3be9a0f9ff82ef56bd828aa
author Vitaly Buka <vitalybuka@chromium.org> 1433140366 -0700
committer ChromeOS Commit Bot <chromeos-commit-bot@chromium.org> 1433182337 +0000

privetd: Compare user scope with minimalRole for local commands

Prived passes current auth scope corresponding to the current
/privet/v3/commands/execute requests to buffet.
Buffet compare scope with minimalRole of requested command and denies
request if scope is not enough.

BUG=brillo:808
TEST=`FEATURES=test emerge-gizmo buffet privetd`

Change-Id: Ib691184460fcd9d099e0688eaeadf831229672aa
Reviewed-on: https://chromium-review.googlesource.com/274234
Tested-by: Vitaly Buka <vitalybuka@chromium.org>
Reviewed-by: Alex Vakulenko <avakulenko@chromium.org>
Commit-Queue: Vitaly Buka <vitalybuka@chromium.org>