tree f58d7435a6191316b90658ed620118ccdd23e7a1
parent c8d6e62bf2306f4edb07bd98e8f93965696dd970
author Eric Anderson <ejona@google.com> 1378943736 -0700
committer Eric Anderson <ejona@google.com> 1378947175 -0700

Add ACL transform support to feeds

Named resources now are transformed as would be expected. Group
definitions took more work to define what was expected.

Group definitions aren't ACLs, so AclTransform turned into more of a
"Principal Transform", but its name is being kept. Since going through
the transform can cause duplicates, we now sort and remove duplicates of
the outgoing principals for each group (like we do for ACLs). However,
removing/merging duplicate group principal keys does not occur, because
there is no way to handle this properly.

Therefore, ACL transforms have the additional limitation that you must
not cause collisions of group names whose definitions are being sent in
feeds. There is no checking to warn the user if a collision occurs.