proposed MM patch: improve rsync_acl query

[Matt Domsch]

mirrormanager has a query that lets the mirrors, and eventually, the
master mirrors, get the Access Control List directly from the
database.  The current query is poor in several ways: it's very slow
as it uses python object walks, which results in hundreds of database
hits instead of only one.  It doesn't let the user specify they want
to limit by hosts on Internet2, or only public hosts.

Patch below fixes these.  The URL will work as:

http://admin.fedoraproject.org/mirrormanager/rsync_acl?internet2_only=1&public_only=1

The arguments on the end are optional.

The mirrors are starting to use this query to populate their own rsync
ACLs.  It's not critical that it go in before F9 launch, but I think
it's quite low-risk.  I've tested it locally and it works as expected.

Thanks,
Matt

-- 
Matt Domsch
Linux Technology Strategist, Dell Office of the CTO
linux.dell.com & www.dell.com/linux