CheckProjectAccess checks if the calling user has access to the LUCI project.

CheckRunCreate verifies that the user(s) who triggered Run are authorized to create the Run for the CLs.

IsMember checks whether the given identity is a member of any given groups.

NewRunReadChecker returns a LoadRunChecker that checks read access for the Run to be loaded.

V0APIAllowGroup is a CRIA group with users that may make requests to v0 API.

CheckResult tells the result of an ACL check performed.