From 01de6ee4f91e81d0f6cf6013c1b117c6eb5f4f62 Mon Sep 17 00:00:00 2001 From: Doug Hellmann Date: Thu, 29 Sep 2016 09:50:12 -0400 Subject: [PATCH] fix permissions on winstacker repositories Project teams should not create their own branches or push merge commits. Change-Id: I886ed7eaa260605258c16f163d34b2940b206879 Signed-off-by: Doug Hellmann --- gerrit/acls/openstack/networking-hyperv.config | 16 ++++++++++++---- gerrit/acls/openstack/os-win.config | 6 +++++- 2 files changed, 17 insertions(+), 5 deletions(-) diff --git a/gerrit/acls/openstack/networking-hyperv.config b/gerrit/acls/openstack/networking-hyperv.config index 2f5265a5c8..64b22757b0 100644 --- a/gerrit/acls/openstack/networking-hyperv.config +++ b/gerrit/acls/openstack/networking-hyperv.config @@ -1,9 +1,5 @@ -[access "refs/for/refs/*"] -pushMerge = group networking-hyperv-release - [access "refs/heads/*"] abandon = group networking-hyperv-core -create = group networking-hyperv-release label-Code-Review = -2..+2 group networking-hyperv-core label-Workflow = -1..+1 group networking-hyperv-core @@ -19,6 +15,18 @@ label-Workflow = -1..+0 group Change Owner label-Workflow = -1..+1 group Project Bootstrappers label-Workflow = -1..+1 group networking-hyperv-core +[access "refs/heads/stable/newton"] +abandon = group Change Owner +abandon = group Project Bootstrappers +abandon = group networking-hyperv-release-branch +exclusiveGroupPermissions = abandon label-Code-Review label-Workflow +label-Code-Review = -2..+2 group Project Bootstrappers +label-Code-Review = -2..+2 group networking-hyperv-release-branch +label-Code-Review = -1..+1 group Registered Users +label-Workflow = -1..+0 group Change Owner +label-Workflow = -1..+1 group Project Bootstrappers +label-Workflow = -1..+1 group networking-hyperv-release-branch + [receive] requireChangeId = true requireContributorAgreement = true diff --git a/gerrit/acls/openstack/os-win.config b/gerrit/acls/openstack/os-win.config index f2fbb3ead6..24a6ab8f5f 100644 --- a/gerrit/acls/openstack/os-win.config +++ b/gerrit/acls/openstack/os-win.config @@ -1,9 +1,13 @@ [access "refs/heads/*"] abandon = group os-win-core -create = group os-win-release label-Code-Review = -2..+2 group os-win-core label-Workflow = -1..+1 group os-win-core +[access "refs/heads/stable/*"] +abandon = group stable-maint-core +label-Code-Review = -2..+2 group stable-maint-core +label-Workflow = -1..+1 group stable-maint-core + [access "refs/tags/*"] pushSignedTag = group library-release