ValidateACLSets validates list of AclSet of a project and returns Sets.

ValidateTaskACLs validates task's ACLs and returns TaskAcls.

Owner role provides full control of a job/trigger.

Reader role allows listing invocations and config of a job/trigger.

Triggerer role allows sending triggers to a job/trigger.

GrantsByRole can answer questions who can READ, TRIGGER, or who OWNs the task.

Role allows certain actions on a Job or a Trigger.

Sets are parsed and indexed `AclSet` of a project.