Unshadow All-Projects in exclusiveGroupPermissions

Whenever a project-specific ACL declares exclusiveGroupPermissions
on some permission, it can block other valid uses of that permission
which would otherwise be inherited from the All-Projects pseudoACL.
Make sure that Project Bootstrappers retains access to abandon,
-2..+2 on label-Code-Review and -1..+1 on label-Workflow. Also make
sure Change Owners can still abandon and add -1..0 on
label-Workflow, and that Registered Users can always -1..+1 on
label-Code-Review.

This change corrects existing ACLs to meet the above criteria, and
also introduces a normalization rule to prevent regression.

Change-Id: I2eecb7028bcab7d5d82ad4155a775a9b2daa441f

gerrit/acls/openstack/aodh.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group aodh-core
 label-Workflow = -1..+1 group aodh-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group aodh-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group aodh-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group aodh-stable-maint
 
 [receive]

gerrit/acls/openstack/barbican.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group barbican-core
 label-Workflow = -1..+1 group barbican-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group barbican-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group barbican-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group barbican-stable-maint
 
 [receive]

gerrit/acls/openstack/ceilometer.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group ceilometer-core
 label-Workflow = -1..+1 group ceilometer-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group ceilometer-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group ceilometer-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group ceilometer-stable-maint
 
 [receive]

gerrit/acls/openstack/ceilometermiddleware.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group ceilometer-core
 label-Workflow = -1..+1 group ceilometer-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group ceilometer-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group ceilometer-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group ceilometer-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/cinder.config

@@ -5,10 +5,15 @@ label-Verified = -1..+1 group cinder-ci
 label-Workflow = -1..+1 group cinder-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group cinder-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group cinder-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group cinder-stable-maint
 
 [receive]

gerrit/acls/openstack/collectd-ceilometer-plugin.config

@@ -6,6 +6,8 @@ label-Workflow = -1..+1 group collectd-ceilometer-plugin-core
 
 [access "refs/heads/stable/*"]
 exclusiveGroupPermissions = label-Workflow
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group collectd-ceilometer-plugin-release
 
 [access "refs/tags/*"]

gerrit/acls/openstack/congress.config

@@ -6,10 +6,15 @@ label-Verified = -1..+1 group congress-ci
 label-Workflow = -1..+1 group congress-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group congress-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group congress-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group congress-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/designate.config

@@ -5,10 +5,15 @@ label-Verified = -1..+1 group designate-ci
 label-Workflow = -1..+1 group designate-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group designate-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group designate-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group designate-stable-maint
 
 [receive]

gerrit/acls/openstack/django_openstack_auth.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group horizon-core
 label-Workflow = -1..+1 group horizon-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group horizon-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group horizon-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group horizon-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/dragonflow.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group dragonflow-core
 label-Workflow = -1..+1 group dragonflow-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/freezer.config

@@ -5,10 +5,15 @@ label-Code-Review = -2..+2 group freezer-core
 label-Workflow = -1..+1 group freezer-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group freezer-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group freezer-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group freezer-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/fuel-agent.config

@@ -8,6 +8,7 @@ label-Workflow = -1..+1 group fuel-agent-core
 [access "refs/heads/stable/7.0"]
 exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]

gerrit/acls/openstack/fuel-astute.config

@@ -8,11 +8,13 @@ label-Workflow = -1..+1 group fuel-astute-core
 [access "refs/heads/stable/6.1"]
 exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/heads/stable/7.0"]
 exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]

gerrit/acls/openstack/fuel-library.config

@@ -8,11 +8,13 @@ label-Workflow = -1..+1 group fuel-library-core
 [access "refs/heads/stable/6.1"]
 exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/heads/stable/7.0"]
 exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]

gerrit/acls/openstack/fuel-main.config

@@ -8,11 +8,13 @@ label-Workflow = -1..+1 group fuel-main-core
 [access "refs/heads/stable/6.1"]
 exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/heads/stable/7.0"]
 exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]

gerrit/acls/openstack/fuel-menu.config

@@ -8,6 +8,7 @@ label-Workflow = -1..+1 group fuel-menu-core
 [access "refs/heads/stable/*"]
 exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]

gerrit/acls/openstack/fuel-mirror.config

@@ -8,6 +8,7 @@ label-Workflow = -1..+1 group fuel-mirror-core
 [access "refs/heads/stable/7.0"]
 exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]

gerrit/acls/openstack/fuel-nailgun-agent.config

@@ -8,6 +8,7 @@ label-Workflow = -1..+1 group fuel-nailgun-agent-core
 [access "refs/heads/stable/7.0"]
 exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]

gerrit/acls/openstack/fuel-ostf.config

@@ -8,11 +8,13 @@ label-Workflow = -1..+1 group fuel-ostf-core
 [access "refs/heads/stable/6.1"]
 exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/heads/stable/7.0"]
 exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]

gerrit/acls/openstack/fuel-web.config

@@ -7,10 +7,14 @@ label-Workflow = -1..+1 group fuel-web-core
 
 [access "refs/heads/stable/6.1"]
 exclusiveGroupPermissions = label-Workflow
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/heads/stable/7.0"]
 exclusiveGroupPermissions = label-Workflow
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]

gerrit/acls/openstack/glance.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group glance-core
 label-Workflow = -1..+1 group glance-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group glance-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group glance-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group glance-stable-maint
 
 [receive]

gerrit/acls/openstack/glance_store.config

@@ -7,10 +7,15 @@ label-Workflow = -1..+1 group glance-core
 label-Workflow = -1..+1 group swift-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group glance-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group glance-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group glance-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/governance.config

@@ -1,8 +1,11 @@
 [access "refs/heads/*"]
 abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group tech-committee-chair
 exclusiveGroupPermissions = abandon label-Workflow
 label-Rollcall-Vote = -1..+1 group tech-committee
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group tech-committee-chair
 
 [access "refs/tags/*"]

gerrit/acls/openstack/heat.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group heat-core
 label-Workflow = -1..+1 group heat-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group heat-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group heat-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group heat-stable-maint
 
 [receive]

gerrit/acls/openstack/horizon.config

@@ -5,10 +5,15 @@ label-Verified = -1..+1 group horizon-ci
 label-Workflow = -1..+1 group horizon-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group horizon-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group horizon-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group horizon-stable-maint
 
 [receive]

gerrit/acls/openstack/intel-nfv-ci-tests.config

@@ -6,6 +6,8 @@ label-Workflow = -1..+1 group intel-nfv-ci-tests-core
 
 [access "refs/heads/stable/*"]
 exclusiveGroupPermissions = label-Workflow
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group intel-nfv-ci-tests-release
 
 [access "refs/tags/*"]

gerrit/acls/openstack/ironic-inspector.config

@@ -6,6 +6,8 @@ label-Workflow = -1..+1 group ironic-inspector-core
 
 [access "refs/heads/stable/*"]
 exclusiveGroupPermissions = label-Workflow
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group ironic-inspector-release
 
 [receive]

gerrit/acls/openstack/ironic-python-agent.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group ironic-python-agent-core
 label-Workflow = -1..+1 group ironic-python-agent-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group ironic-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group ironic-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group ironic-stable-maint
 
 [receive]

gerrit/acls/openstack/ironic-webclient.config

@@ -6,6 +6,8 @@ label-Workflow = -1..+1 group ironic-webclient-core
 
 [access "refs/heads/stable/*"]
 exclusiveGroupPermissions = label-Workflow
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group ironic-webclient-release
 
 [access "refs/tags/*"]

gerrit/acls/openstack/ironic.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group ironic-core
 label-Workflow = -1..+1 group ironic-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group ironic-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group ironic-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group ironic-stable-maint
 
 [receive]

gerrit/acls/openstack/keystone.config

@@ -7,10 +7,15 @@ label-Code-Review = -2..+2 group keystone-core
 label-Workflow = -1..+1 group keystone-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group keystone-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group keystone-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group keystone-stable-maint
 
 [receive]

gerrit/acls/openstack/keystonemiddleware.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group keystoneauth-core
 label-Workflow = -1..+1 group keystoneauth-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group keystone-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group keystone-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group keystone-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/kingbird.config

@@ -5,10 +5,15 @@ label-Code-Review = -2..+2 group kingbird-core
 label-Workflow = -1..+1 group kingbird-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group kingbird-release
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group kingbird-release
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group kingbird-release
 
 [access "refs/tags/*"]

gerrit/acls/openstack/kosmos.config

@@ -6,7 +6,11 @@ label-Workflow = -1..+1 group kosmos-core
 [access "refs/heads/stable/*"]
 create = group kosmos-release
 exclusiveGroupPermissions = label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group kosmos-release
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group kosmos-release
 
 [receive]

gerrit/acls/openstack/kuryr.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group kuryr-core
 label-Workflow = -1..+1 group kuryr-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/manila.config

@@ -5,10 +5,15 @@ label-Code-Review = -2..+2 group manila-core
 label-Workflow = -1..+1 group manila-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group manila-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group manila-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group manila-stable-maint
 
 [receive]

gerrit/acls/openstack/mistral.config

@@ -5,10 +5,15 @@ label-Code-Review = -2..+2 group mistral-core
 label-Workflow = -1..+1 group mistral-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group mistral-milestone
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group mistral-milestone
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group mistral-milestone
 
 [access "refs/tags/*"]

gerrit/acls/openstack/murano.config

@@ -6,17 +6,27 @@ label-Verified = -1..+1 group murano-ci
 label-Workflow = -1..+1 group murano-core
 
 [access "refs/heads/release-*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group murano-milestone
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group murano-milestone
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group murano-milestone
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group murano-milestone
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group murano-milestone
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group murano-milestone
 
 [access "refs/tags/*"]

gerrit/acls/openstack/network-checker.config

@@ -7,6 +7,8 @@ label-Workflow = -1..+1 group network-checker-core
 
 [access "refs/heads/stable/*"]
 exclusiveGroupPermissions = label-Workflow
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-ale-omniswitch.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-ale-omniswitch-core
 label-Workflow = -1..+1 group networking-ale-omniswitch-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-arista.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-arista-core
 label-Workflow = -1..+1 group networking-arista-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-bagpipe.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-bagpipe-core
 label-Workflow = -1..+1 group networking-bagpipe-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-bgpvpn.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-bgpvpn-core
 label-Workflow = -1..+1 group networking-bgpvpn-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-calico.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-calico-core
 label-Workflow = -1..+1 group networking-calico-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-cisco.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-cisco-core
 label-Workflow = -1..+1 group networking-cisco-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-fortinet.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-fortinet-core
 label-Workflow = -1..+1 group networking-fortinet-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-fujitsu.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-fujitsu-core
 label-Workflow = -1..+1 group networking-fujitsu-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-hyperv.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-hyperv-core
 label-Workflow = -1..+1 group networking-hyperv-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-infoblox.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-infoblox-core
 label-Workflow = -1..+1 group networking-infoblox-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-l2gw.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-l2gw-core
 label-Workflow = -1..+1 group networking-l2gw-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-lenovo.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-lenovo-core
 label-Workflow = -1..+1 group networking-lenovo-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-midonet.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-midonet-core
 label-Workflow = -1..+1 group networking-midonet-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-odl.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-odl-core
 label-Workflow = -1..+1 group networking-odl-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-ofagent.config

@@ -9,10 +9,15 @@ label-Verified = -1..+1 group networking-ofagent-ci
 label-Workflow = -1..+1 group networking-ofagent-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-onos.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-onos-core
 label-Workflow = -1..+1 group networking-onos-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-ovn.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-ovn-core
 label-Workflow = -1..+1 group networking-ovn-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-ovs-dpdk.config

@@ -6,6 +6,8 @@ label-Workflow = -1..+1 group networking-ovs-dpdk-core
 
 [access "refs/heads/stable/*"]
 exclusiveGroupPermissions = label-Workflow
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group networking-ovs-dpdk-release
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-plumgrid.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-plumgrid-core
 label-Workflow = -1..+1 group networking-plumgrid-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-powervm.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-powervm-core
 label-Workflow = -1..+1 group networking-powervm-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-sfc.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-sfc-core
 label-Workflow = -1..+1 group networking-sfc-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/networking-vsphere.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group networking-vsphere-core
 label-Workflow = -1..+1 group networking-vsphere-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/neutron-classifier.config

@@ -9,10 +9,15 @@ label-Verified = -1..+1 group neutron-ci
 label-Workflow = -1..+1 group neutron-classifier-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/neutron-fwaas.config

@@ -8,10 +8,15 @@ label-Verified = -1..+1 group neutron-ci
 label-Workflow = -1..+1 group neutron-fwaas-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [receive]

gerrit/acls/openstack/neutron-lbaas-dashboard.config

@@ -8,10 +8,15 @@ label-Verified = -1..+1 group neutron-ci
 label-Workflow = -1..+1 group neutron-lbaas-dashboard-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [receive]

gerrit/acls/openstack/neutron-lbaas.config

@@ -8,10 +8,15 @@ label-Verified = -1..+1 group neutron-ci
 label-Workflow = -1..+1 group neutron-lbaas-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [receive]

gerrit/acls/openstack/neutron-vpnaas.config

@@ -8,10 +8,15 @@ label-Verified = -1..+1 group neutron-ci
 label-Workflow = -1..+1 group neutron-vpnaas-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [receive]

gerrit/acls/openstack/neutron.config

@@ -8,10 +8,15 @@ label-Verified = -1..+1 group neutron-ci
 label-Workflow = -1..+1 group neutron-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [receive]

gerrit/acls/openstack/nova.config

@@ -5,10 +5,15 @@ label-Verified = -1..+1 group nova-ci
 label-Workflow = -1..+1 group nova-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group nova-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group nova-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group nova-stable-maint
 
 [receive]

gerrit/acls/openstack/octavia.config

@@ -8,10 +8,15 @@ label-Code-Review = -2..+2 group octavia-core
 label-Workflow = -1..+1 group octavia-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/openstack.config

@@ -3,17 +3,27 @@ exclsiveGroupPermissions = Push
 push = group Release Managers
 
 [access "refs/heads/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group Release Managers
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group Release Managers
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group Release Managers
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group Release Managers
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group Release Managers
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group Release Managers
 
 [receive]

gerrit/acls/openstack/oslo-incubator.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group oslo-core
 label-Workflow = -1..+1 group oslo-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group oslo-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group oslo-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group oslo-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/python-aodhclient.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group aodh-core
 label-Workflow = -1..+1 group aodh-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group aodh-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group aodh-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group aodh-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/python-ceilometerclient.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group ceilometer-core
 label-Workflow = -1..+1 group ceilometer-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group ceilometer-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group ceilometer-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group ceilometer-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/python-cinderclient.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group cinder-core
 label-Workflow = -1..+1 group cinder-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group cinder-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group cinder-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group cinder-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/python-designateclient.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group designate-core
 label-Workflow = -1..+1 group designate-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group designate-milestone
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group designate-milestone
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group designate-milestone
 
 [access "refs/tags/*"]

gerrit/acls/openstack/python-fuelclient.config

@@ -8,11 +8,13 @@ label-Workflow = -1..+1 group python-fuelclient-core
 [access "refs/heads/stable/6.1"]
 exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/heads/stable/7.0"]
 exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]

gerrit/acls/openstack/python-glanceclient.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group glance-core
 label-Workflow = -1..+1 group glance-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group glance-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group glance-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group glance-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/python-heatclient.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group heat-core
 label-Workflow = -1..+1 group heat-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group heat-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group heat-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group heat-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/python-ironicclient.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group ironic-core
 label-Workflow = -1..+1 group ironic-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group ironic-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group ironic-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group ironic-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/python-keystoneclient.config

@@ -10,10 +10,15 @@ label-Code-Review = -2..+2 group keystone-core
 label-Workflow = -1..+1 group keystone-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group keystone-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group keystone-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group keystone-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/python-neutronclient.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group neutron-core
 label-Workflow = -1..+1 group neutron-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/python-novaclient.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group python-novaclient-core
 label-Workflow = -1..+1 group python-novaclient-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group nova-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group nova-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group nova-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/python-saharaclient.config

@@ -5,10 +5,15 @@ label-Verified = -1..+1 group sahara-ci
 label-Workflow = -1..+1 group sahara-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group sahara-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group sahara-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group sahara-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/python-swiftclient.config

@@ -7,10 +7,15 @@ label-Code-Review = -2..+2 group swiftclient-core
 label-Workflow = -1..+1 group swiftclient-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group swift-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group swift-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group swift-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/python-troveclient.config

@@ -5,10 +5,15 @@ label-Verified = -1..+1 group trove-ci
 label-Workflow = -1..+1 group trove-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group trove-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group trove-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group trove-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/python-zaqarclient.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group zaqar-core
 label-Workflow = -1..+1 group zaqar-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group zaqar-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group zaqar-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group zaqar-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/requirements.config

@@ -4,11 +4,16 @@ label-Code-Review = -2..+2 group requirements-core
 label-Workflow = -1..+1 group requirements-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group stable-maint-core
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group infra-core
 label-Code-Review = -2..+2 group stable-maint-core
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group infra-core
 label-Workflow = -1..+1 group stable-maint-core
 

gerrit/acls/openstack/sahara-dashboard.config

@@ -5,10 +5,15 @@ label-Verified = -1..+1 group sahara-ci
 label-Workflow = -1..+1 group sahara-dashboard-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group sahara-dashboard-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group sahara-dashboard-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group sahara-dashboard-stable-maint
 
 [receive]

gerrit/acls/openstack/sahara-etc.config

@@ -6,10 +6,15 @@ label-Verified = -1..+1 group sahara-ci
 label-Workflow = -1..+1 group sahara-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group sahara-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group sahara-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group sahara-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/sahara.config

@@ -5,10 +5,15 @@ label-Verified = -1..+1 group sahara-ci
 label-Workflow = -1..+1 group sahara-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group sahara-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group sahara-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group sahara-stable-maint
 
 [receive]

gerrit/acls/openstack/shotgun.config

@@ -7,6 +7,8 @@ label-Workflow = -1..+1 group shotgun-core
 
 [access "refs/heads/stable/*"]
 exclusiveGroupPermissions = label-Workflow
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]

gerrit/acls/openstack/smaug.config

@@ -5,10 +5,15 @@ label-Code-Review = -2..+2 group smaug-core
 label-Workflow = -1..+1 group smaug-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group smaug-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group smaug-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group smaug-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/swift.config

@@ -7,10 +7,15 @@ label-Code-Review = -2..+2 group swift-core
 label-Workflow = -1..+1 group swift-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group swift-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group swift-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group swift-stable-maint
 
 [receive]

gerrit/acls/openstack/transparency-policy.config

@@ -1,7 +1,11 @@
 [access "refs/heads/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group transparency-committee-chair
 exclusiveGroupPermissions = abandon label-Workflow
 label-Rollcall-Vote = -1..+1 group transparency-committee
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group transparency-committee-chair
 
 [access "refs/tags/*"]

gerrit/acls/openstack/tripleo-image-elements.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group diskimage-builder-core
 label-Workflow = -1..+1 group diskimage-builder-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group tripleo-core
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group tripleo-core
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group tripleo-core
 
 [access "refs/tags/*"]

gerrit/acls/openstack/trove-dashboard.config

@@ -7,11 +7,16 @@ label-Workflow = -1..+1 group horizon-core
 label-Workflow = -1..+1 group trove-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group trove-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group horizon-stable-maint
 label-Code-Review = -2..+2 group trove-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group horizon-stable-maint
 label-Workflow = -1..+1 group trove-stable-maint
 

gerrit/acls/openstack/trove.config

@@ -5,10 +5,15 @@ label-Verified = -1..+1 group trove-ci
 label-Workflow = -1..+1 group trove-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group trove-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group trove-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group trove-stable-maint
 
 [receive]

gerrit/acls/openstack/vmware-nsx.config

@@ -9,10 +9,15 @@ label-Verified = -1..+1 group oslo-vmware-ci
 label-Workflow = -1..+1 group vmware-nsx-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group neutron-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group neutron-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]

gerrit/acls/openstack/yaql.config

@@ -5,10 +5,15 @@ label-Code-Review = -2..+2 group yaql-core
 label-Workflow = -1..+1 group yaql-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group yaql-milestone
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group yaql-milestone
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group yaql-milestone
 
 [access "refs/tags/*"]

gerrit/acls/openstack/zaqar.config

@@ -4,10 +4,15 @@ label-Code-Review = -2..+2 group zaqar-core
 label-Workflow = -1..+1 group zaqar-core
 
 [access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
 abandon = group zaqar-stable-maint
 exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
 label-Code-Review = -2..+2 group zaqar-stable-maint
 label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group zaqar-stable-maint
 
 [receive]