Modify access rules

[scm/acls/domains.git] / project.config

diff --git a/project.config b/project.config
index 466c84c..2a11b7b 100644 (file)
--- a/project.config
+++ b/project.config
@@ -1,7 +1,7 @@
 [access]
        inheritFrom = All-Projects
 [project]
-       state = active
+       description = Access inherited by domain projects.
 [access "refs/changes/*"]
        read = group Registered Users
 [access "refs/heads/*"]
@@ -16,13 +16,61 @@
 [access "refs/tags/accepted/*"]
        create = group Administrators
        create = group Non-Interactive Users
-       create = block group Registered Users
        push = +force group Administrators
        push = +force group Non-Interactive Users
-       push = block +force group Registered Users
        pushTag = +force group Administrators
        pushTag = +force group Non-Interactive Users
-       pushTag = block group Registered Users
        pushSignedTag = group Administrators
        pushSignedTag = group Non-Interactive Users
-       pushSignedTag = block group Registered Users
+       exclusiveGroupPermissions = create forgeAuthor forgeCommitter push pushTag pushSignedTag
+       read = group Registered Users
+       forgeAuthor = group Administrators
+       forgeAuthor = group Non-Interactive Users
+       forgeCommitter = group Administrators
+       forgeCommitter = group Non-Interactive Users
+[receive]
+       requireChangeId = true
+       requireSignedOffBy = true
+[access "refs/heads/sandbox/${username}/*"]
+       abandon = group Registered Users
+       create = group Registered Users
+       forgeAuthor = group Registered Users
+       forgeCommitter = group Registered Users
+       push = +force group Registered Users
+       pushMerge = group Registered Users
+       label-Code-Review = -2..+2 group Registered Users
+       label-Verified = -1..+1 group Registered Users
+       rebase = group Registered Users
+       submit = group Registered Users
+[access "refs/heads/accepted/*"]
+       exclusiveGroupPermissions = create push pushMerge
+       read = group Registered Users
+       create = group Administrators
+       create = group Non-Interactive Users
+       forgeAuthor = group Administrators
+       forgeAuthor = group Non-Interactive Users
+       forgeCommitter = group Administrators
+       forgeCommitter = group Non-Interactive Users
+       push = +force group Administrators
+       push = +force group Non-Interactive Users
+       pushMerge = group Administrators
+       pushMerge = group Non-Interactive Users
+[submit]
+       mergeContent = true
+[access "refs/tags/*"]
+       push = +force group Administrators
+       create = group Administrators
+[access "refs/heads/tizen"]
+       push = +force group Release Engineers - Tizen
+[access "refs/heads/tizen_common"]
+       push = +force group Release Engineers - Tizen Common
+[access "refs/heads/tizen_generic"]
+       push = +force group Release Engineers - Tizen Generic
+[access "refs/heads/tizen_ivi"]
+       push = +force group Release Engineers - Tizen IVI
+[access "refs/heads/tizen_ivi_release"]
+       push = +force group Release Engineers - Tizen IVI
+[access "refs/heads/tizen_mobile"]
+       push = +force group Release Engineers - Tizen Mobile
+[access "refs/heads/tizen_mobile_release"]
+       push = +force group Release Engineers - Tizen Mobile