f62e441f24
Whenever a project-specific ACL declares exclusiveGroupPermissions on some permission, it can block other valid uses of that permission which would otherwise be inherited from the All-Projects pseudoACL. Make sure that Project Bootstrappers retains access to abandon, -2..+2 on label-Code-Review and -1..+1 on label-Workflow. Also make sure Change Owners can still abandon and add -1..0 on label-Workflow, and that Registered Users can always -1..+1 on label-Code-Review. This change corrects existing ACLs to meet the above criteria, and also introduces a normalization rule to prevent regression. Change-Id: I2eecb7028bcab7d5d82ad4155a775a9b2daa441f
22 lines
664 B
Plaintext
22 lines
664 B
Plaintext
[access "refs/heads/*"]
|
|
abandon = group collectd-ceilometer-plugin-core
|
|
create = group collectd-ceilometer-plugin-release
|
|
label-Code-Review = -2..+2 group collectd-ceilometer-plugin-core
|
|
label-Workflow = -1..+1 group collectd-ceilometer-plugin-core
|
|
|
|
[access "refs/heads/stable/*"]
|
|
exclusiveGroupPermissions = label-Workflow
|
|
label-Workflow = -1..+0 group Change Owner
|
|
label-Workflow = -1..+1 group Project Bootstrappers
|
|
label-Workflow = -1..+1 group collectd-ceilometer-plugin-release
|
|
|
|
[access "refs/tags/*"]
|
|
pushSignedTag = group collectd-ceilometer-plugin-release
|
|
|
|
[receive]
|
|
requireChangeId = true
|
|
requireContributorAgreement = true
|
|
|
|
[submit]
|
|
mergeContent = true
|