Unshadow All-Projects in exclusiveGroupPermissions

Whenever a project-specific ACL declares exclusiveGroupPermissions
on some permission, it can block other valid uses of that permission
which would otherwise be inherited from the All-Projects pseudoACL.
Make sure that Project Bootstrappers retains access to abandon,
-2..+2 on label-Code-Review and -1..+1 on label-Workflow. Also make
sure Change Owners can still abandon and add -1..0 on
label-Workflow, and that Registered Users can always -1..+1 on
label-Code-Review.

This change corrects existing ACLs to meet the above criteria, and
also introduces a normalization rule to prevent regression.

Change-Id: I2eecb7028bcab7d5d82ad4155a775a9b2daa441f
This commit is contained in:
Jeremy Stanley 2016-02-17 22:39:03 +00:00
parent cb63263510
commit f62e441f24
101 changed files with 479 additions and 1 deletions

View File

@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group aodh-core
label-Workflow = -1..+1 group aodh-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group aodh-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group aodh-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group aodh-stable-maint
[receive]

View File

@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group barbican-core
label-Workflow = -1..+1 group barbican-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group barbican-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group barbican-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group barbican-stable-maint
[receive]

View File

@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group ceilometer-core
label-Workflow = -1..+1 group ceilometer-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group ceilometer-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group ceilometer-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group ceilometer-stable-maint
[receive]

View File

@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group ceilometer-core
label-Workflow = -1..+1 group ceilometer-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group ceilometer-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group ceilometer-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group ceilometer-stable-maint
[access "refs/tags/*"]

View File

@ -5,10 +5,15 @@ label-Verified = -1..+1 group cinder-ci
label-Workflow = -1..+1 group cinder-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group cinder-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group cinder-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group cinder-stable-maint
[receive]

View File

@ -6,6 +6,8 @@ label-Workflow = -1..+1 group collectd-ceilometer-plugin-core
[access "refs/heads/stable/*"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group collectd-ceilometer-plugin-release
[access "refs/tags/*"]

View File

@ -6,10 +6,15 @@ label-Verified = -1..+1 group congress-ci
label-Workflow = -1..+1 group congress-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group congress-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group congress-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group congress-stable-maint
[access "refs/tags/*"]

View File

@ -5,10 +5,15 @@ label-Verified = -1..+1 group designate-ci
label-Workflow = -1..+1 group designate-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group designate-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group designate-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group designate-stable-maint
[receive]

View File

@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group horizon-core
label-Workflow = -1..+1 group horizon-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group horizon-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group horizon-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group horizon-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group dragonflow-core
label-Workflow = -1..+1 group dragonflow-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -5,10 +5,15 @@ label-Code-Review = -2..+2 group freezer-core
label-Workflow = -1..+1 group freezer-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group freezer-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group freezer-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group freezer-stable-maint
[access "refs/tags/*"]

View File

@ -8,6 +8,7 @@ label-Workflow = -1..+1 group fuel-agent-core
[access "refs/heads/stable/7.0"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group fuel-stable-core
[access "refs/tags/*"]

View File

@ -8,11 +8,13 @@ label-Workflow = -1..+1 group fuel-astute-core
[access "refs/heads/stable/6.1"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group fuel-stable-core
[access "refs/heads/stable/7.0"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group fuel-stable-core
[access "refs/tags/*"]

View File

@ -8,11 +8,13 @@ label-Workflow = -1..+1 group fuel-library-core
[access "refs/heads/stable/6.1"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group fuel-stable-core
[access "refs/heads/stable/7.0"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group fuel-stable-core
[access "refs/tags/*"]

View File

@ -8,11 +8,13 @@ label-Workflow = -1..+1 group fuel-main-core
[access "refs/heads/stable/6.1"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group fuel-stable-core
[access "refs/heads/stable/7.0"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group fuel-stable-core
[access "refs/tags/*"]

View File

@ -8,6 +8,7 @@ label-Workflow = -1..+1 group fuel-menu-core
[access "refs/heads/stable/*"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group fuel-stable-core
[access "refs/tags/*"]

View File

@ -8,6 +8,7 @@ label-Workflow = -1..+1 group fuel-mirror-core
[access "refs/heads/stable/7.0"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group fuel-stable-core
[access "refs/tags/*"]

View File

@ -8,6 +8,7 @@ label-Workflow = -1..+1 group fuel-nailgun-agent-core
[access "refs/heads/stable/7.0"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group fuel-stable-core
[access "refs/tags/*"]

View File

@ -8,11 +8,13 @@ label-Workflow = -1..+1 group fuel-ostf-core
[access "refs/heads/stable/6.1"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group fuel-stable-core
[access "refs/heads/stable/7.0"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group fuel-stable-core
[access "refs/tags/*"]

View File

@ -7,10 +7,14 @@ label-Workflow = -1..+1 group fuel-web-core
[access "refs/heads/stable/6.1"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group fuel-stable-core
[access "refs/heads/stable/7.0"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group fuel-stable-core
[access "refs/tags/*"]

View File

@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group glance-core
label-Workflow = -1..+1 group glance-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group glance-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group glance-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group glance-stable-maint
[receive]

View File

@ -7,10 +7,15 @@ label-Workflow = -1..+1 group glance-core
label-Workflow = -1..+1 group swift-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group glance-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group glance-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group glance-stable-maint
[access "refs/tags/*"]

View File

@ -1,8 +1,11 @@
[access "refs/heads/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group tech-committee-chair
exclusiveGroupPermissions = abandon label-Workflow
label-Rollcall-Vote = -1..+1 group tech-committee
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group tech-committee-chair
[access "refs/tags/*"]

View File

@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group heat-core
label-Workflow = -1..+1 group heat-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group heat-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group heat-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group heat-stable-maint
[receive]

View File

@ -5,10 +5,15 @@ label-Verified = -1..+1 group horizon-ci
label-Workflow = -1..+1 group horizon-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group horizon-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group horizon-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group horizon-stable-maint
[receive]

View File

@ -6,6 +6,8 @@ label-Workflow = -1..+1 group intel-nfv-ci-tests-core
[access "refs/heads/stable/*"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group intel-nfv-ci-tests-release
[access "refs/tags/*"]

View File

@ -6,6 +6,8 @@ label-Workflow = -1..+1 group ironic-inspector-core
[access "refs/heads/stable/*"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group ironic-inspector-release
[receive]

View File

@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group ironic-python-agent-core
label-Workflow = -1..+1 group ironic-python-agent-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group ironic-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group ironic-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group ironic-stable-maint
[receive]

View File

@ -6,6 +6,8 @@ label-Workflow = -1..+1 group ironic-webclient-core
[access "refs/heads/stable/*"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group ironic-webclient-release
[access "refs/tags/*"]

View File

@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group ironic-core
label-Workflow = -1..+1 group ironic-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group ironic-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group ironic-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group ironic-stable-maint
[receive]

View File

@ -7,10 +7,15 @@ label-Code-Review = -2..+2 group keystone-core
label-Workflow = -1..+1 group keystone-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group keystone-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group keystone-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group keystone-stable-maint
[receive]

View File

@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group keystoneauth-core
label-Workflow = -1..+1 group keystoneauth-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group keystone-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group keystone-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group keystone-stable-maint
[access "refs/tags/*"]

View File

@ -5,10 +5,15 @@ label-Code-Review = -2..+2 group kingbird-core
label-Workflow = -1..+1 group kingbird-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group kingbird-release
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group kingbird-release
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group kingbird-release
[access "refs/tags/*"]

View File

@ -6,7 +6,11 @@ label-Workflow = -1..+1 group kosmos-core
[access "refs/heads/stable/*"]
create = group kosmos-release
exclusiveGroupPermissions = label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group kosmos-release
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group kosmos-release
[receive]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group kuryr-core
label-Workflow = -1..+1 group kuryr-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -5,10 +5,15 @@ label-Code-Review = -2..+2 group manila-core
label-Workflow = -1..+1 group manila-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group manila-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group manila-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group manila-stable-maint
[receive]

View File

@ -5,10 +5,15 @@ label-Code-Review = -2..+2 group mistral-core
label-Workflow = -1..+1 group mistral-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group mistral-milestone
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group mistral-milestone
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group mistral-milestone
[access "refs/tags/*"]

View File

@ -6,17 +6,27 @@ label-Verified = -1..+1 group murano-ci
label-Workflow = -1..+1 group murano-core
[access "refs/heads/release-*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group murano-milestone
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group murano-milestone
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group murano-milestone
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group murano-milestone
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group murano-milestone
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group murano-milestone
[access "refs/tags/*"]

View File

@ -7,6 +7,8 @@ label-Workflow = -1..+1 group network-checker-core
[access "refs/heads/stable/*"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group fuel-stable-core
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-ale-omniswitch-core
label-Workflow = -1..+1 group networking-ale-omniswitch-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-arista-core
label-Workflow = -1..+1 group networking-arista-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-bagpipe-core
label-Workflow = -1..+1 group networking-bagpipe-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-bgpvpn-core
label-Workflow = -1..+1 group networking-bgpvpn-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-calico-core
label-Workflow = -1..+1 group networking-calico-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-cisco-core
label-Workflow = -1..+1 group networking-cisco-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-fortinet-core
label-Workflow = -1..+1 group networking-fortinet-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-fujitsu-core
label-Workflow = -1..+1 group networking-fujitsu-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-hyperv-core
label-Workflow = -1..+1 group networking-hyperv-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-infoblox-core
label-Workflow = -1..+1 group networking-infoblox-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-l2gw-core
label-Workflow = -1..+1 group networking-l2gw-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-lenovo-core
label-Workflow = -1..+1 group networking-lenovo-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-midonet-core
label-Workflow = -1..+1 group networking-midonet-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-odl-core
label-Workflow = -1..+1 group networking-odl-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -9,10 +9,15 @@ label-Verified = -1..+1 group networking-ofagent-ci
label-Workflow = -1..+1 group networking-ofagent-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-onos-core
label-Workflow = -1..+1 group networking-onos-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-ovn-core
label-Workflow = -1..+1 group networking-ovn-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -6,6 +6,8 @@ label-Workflow = -1..+1 group networking-ovs-dpdk-core
[access "refs/heads/stable/*"]
exclusiveGroupPermissions = label-Workflow
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group networking-ovs-dpdk-release
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-plumgrid-core
label-Workflow = -1..+1 group networking-plumgrid-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-powervm-core
label-Workflow = -1..+1 group networking-powervm-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-sfc-core
label-Workflow = -1..+1 group networking-sfc-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-vsphere-core
label-Workflow = -1..+1 group networking-vsphere-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -9,10 +9,15 @@ label-Verified = -1..+1 group neutron-ci
label-Workflow = -1..+1 group neutron-classifier-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -8,10 +8,15 @@ label-Verified = -1..+1 group neutron-ci
label-Workflow = -1..+1 group neutron-fwaas-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[receive]

View File

@ -8,10 +8,15 @@ label-Verified = -1..+1 group neutron-ci
label-Workflow = -1..+1 group neutron-lbaas-dashboard-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[receive]

View File

@ -8,10 +8,15 @@ label-Verified = -1..+1 group neutron-ci
label-Workflow = -1..+1 group neutron-lbaas-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[receive]

View File

@ -8,10 +8,15 @@ label-Verified = -1..+1 group neutron-ci
label-Workflow = -1..+1 group neutron-vpnaas-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[receive]

View File

@ -8,10 +8,15 @@ label-Verified = -1..+1 group neutron-ci
label-Workflow = -1..+1 group neutron-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[receive]

View File

@ -5,10 +5,15 @@ label-Verified = -1..+1 group nova-ci
label-Workflow = -1..+1 group nova-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group nova-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group nova-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group nova-stable-maint
[receive]

View File

@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group octavia-core
label-Workflow = -1..+1 group octavia-core
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group neutron-stable-maint
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group neutron-stable-maint
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group neutron-stable-maint
[access "refs/tags/*"]

View File

@ -3,17 +3,27 @@ exclsiveGroupPermissions = Push
push = group Release Managers
[access "refs/heads/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group Release Managers
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group Release Managers
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group Release Managers
[access "refs/heads/stable/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group Release Managers
exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
label-Code-Review = -2..+2 group Project Bootstrappers
label-Code-Review = -2..+2 group Release Managers
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group Release Managers
[receive]

View File

@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group oslo-core
label-Workflow = -1..+1 group oslo-core