ReceiveCommit#validCommit runs validation of new changes received. Some of these validations include branch permission checks. After running the check, valid commits were cached based on ObjectID. Since the same commit could be pushed to a multiple branches in the same push, it might be possible to bypass permission checks using this incorrect caching. Change-Id: I82b012f696bc18791fb4cd62fdf863efd3f8e4a4