Function shouldAllowAcls

edgraph/access.go:950–952

With shared instance enabled, we don't allow ACL operations from any of the non-galaxy namespace.

(ns uint64)

// With shared instance enabled, we don't allow ACL operations from any of the non-galaxy namespace.
func shouldAllowAcls(ns uint64) bool {
	return !x.Config.SharedInstance || ns == x.RootNamespace
}

// authorizeQuery authorizes the query using the aclCachePtr. It will silently drop all
// unauthorized predicates from query.