Require a special permission for clobbering.

[ghost]

No description provided.

[djmitche]

This bit looks good -- the other methods are informational, so they don't need auth.

I can't quite piece together what route the buildslaves use, but that's probably due to under-caffeination..

[Callek]

...still failing

[ghost]

@Callek At last!

[Callek]

👍 looking through this, I'm satisfied, but I am not a huge fan of the perm name (though I can't think of any better naming),

AND I'd love if the test_context didn't always have that perm, and instead only added the perm for the tests that need it (and have tests that the perm itself is required to use those endpoints).

That way you ensure the no-perm-needed endpoints stay no-perm-needed (until you conciously decide they need a perm) and you get tests that the perm-needed-ones stay perm needed, also explicitly.

I'm ok if thats a followup.

[ghost]

Fair, I'll change the perm name to clobberer.post.clobber and modify the test context.

[ghost]

I'm going to need to come back to the test context later. It's giving me troubles that I fear may become a rabbit hole. In the near term, having security is more important.