code: func isAllowed(c context.Context, tags []string) bool {
  	for _, t := range tags {
  		if t == "allow_milo:1" {
  			return true
  		}
  	}
  	for _, t := range tags {
  		if strings.HasPrefix(t, "luci_project:") {
  			sp := strings.SplitN(t, ":", 2)
  			if len(sp) != 2 {
  				return false
  			}
  			logging.Debugf(c, "Checking if user has access to %s", sp[1])
  			// sp[1] is the project ID.
  			allowed, err := common.IsAllowed(c, sp[1])
  			if err != nil {
  				logging.WithError(err).Errorf(c, "could not perform acl check")
  				return false
  			}
  			return allowed
  		}
  	}
  	return false
  }
docs: // isAllowed checks if:
  // 1. allow_milo:1 is present.  If so, it's a public job.
  // 2. luci_project is present, and if the logged in user has access to that project.