Modify access rules

[scm/acls/domains.git] / project.config

diff --git a/project.config b/project.config
index ff00c44..13306d6 100644 (file)
--- a/project.config
+++ b/project.config
@@ -17,13 +17,46 @@
 [access "refs/tags/accepted/*"]
        create = group Administrators
        create = group Non-Interactive Users
-       create = block group Registered Users
        push = +force group Administrators
        push = +force group Non-Interactive Users
-       push = block +force group Registered Users
        pushTag = +force group Administrators
        pushTag = +force group Non-Interactive Users
-       pushTag = block group Registered Users
        pushSignedTag = group Administrators
        pushSignedTag = group Non-Interactive Users
-       pushSignedTag = block group Registered Users
+       exclusiveGroupPermissions = create forgeAuthor forgeCommitter push pushTag pushSignedTag
+       read = group Registered Users
+       forgeAuthor = group Administrators
+       forgeAuthor = group Non-Interactive Users
+       forgeCommitter = group Administrators
+       forgeCommitter = group Non-Interactive Users
+[receive]
+       requireChangeId = true
+       requireSignedOffBy = true
+[access "refs/heads/sandbox/${username}/*"]
+       abandon = group Registered Users
+       create = group Registered Users
+       forgeAuthor = group Registered Users
+       forgeCommitter = group Registered Users
+       push = +force group Registered Users
+       pushMerge = group Registered Users
+       label-Code-Review = -2..+2 group Registered Users
+       label-Verified = -1..+1 group Registered Users
+       rebase = group Registered Users
+       submit = group Registered Users
+[access "refs/heads/accepted/*"]
+       exclusiveGroupPermissions = create push pushMerge
+       read = group Registered Users
+       create = group Administrators
+       create = group Non-Interactive Users
+       forgeAuthor = group Administrators
+       forgeAuthor = group Non-Interactive Users
+       forgeCommitter = group Administrators
+       forgeCommitter = group Non-Interactive Users
+       push = +force group Administrators
+       push = +force group Non-Interactive Users
+       pushMerge = group Administrators
+       pushMerge = group Non-Interactive Users
+[submit]
+       mergeContent = true
+[access "refs/tags/*"]
+       push = +force group Administrators