Modify access rules

[scm/acls/domains.git] / project.config

diff --git a/project.config b/project.config
index 86c5797..704da86 100644 (file)
--- a/project.config
+++ b/project.config
@@ -15,18 +15,20 @@
 [access "refs/notes/*"]
        read = group Registered Users
 [access "refs/tags/accepted/*"]
-       create = deny group Registered Users
        create = group Administrators
        create = group Non-Interactive Users
-       push = deny +force group Registered Users
+       create = block group Registered Users
        push = +force group Administrators
        push = +force group Non-Interactive Users
-       pushTag = deny group Registered Users
+       push = block group Registered Users
        pushTag = +force group Administrators
        pushTag = +force group Non-Interactive Users
-       pushSignedTag = deny group Registered Users
+       pushTag = block group Registered Users
        pushSignedTag = group Administrators
        pushSignedTag = group Non-Interactive Users
+       pushSignedTag = block group Registered Users
+       exclusiveGroupPermissions = create push pushTag pushSignedTag
+       read = group Registered Users
 [receive]
        requireChangeId = true
 [access "refs/heads/sandbox/${username}/*"]