project-config/gerrit/acls/openstack/transparency-policy.config
Jeremy Stanley f62e441f24 Unshadow All-Projects in exclusiveGroupPermissions
Whenever a project-specific ACL declares exclusiveGroupPermissions
on some permission, it can block other valid uses of that permission
which would otherwise be inherited from the All-Projects pseudoACL.
Make sure that Project Bootstrappers retains access to abandon,
-2..+2 on label-Code-Review and -1..+1 on label-Workflow. Also make
sure Change Owners can still abandon and add -1..0 on
label-Workflow, and that Registered Users can always -1..+1 on
label-Code-Review.

This change corrects existing ACLs to meet the above criteria, and
also introduces a normalization rule to prevent regression.

Change-Id: I2eecb7028bcab7d5d82ad4155a775a9b2daa441f
2016-02-17 22:39:03 +00:00

38 lines
960 B
Plaintext

[access "refs/heads/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group transparency-committee-chair
exclusiveGroupPermissions = abandon label-Workflow
label-Rollcall-Vote = -1..+1 group transparency-committee
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group transparency-committee-chair
[access "refs/tags/*"]
pushSignedTag = group transparency-committee-chair
[label "Code-Review"]
copyAllScoresOnTrivialRebase = true
defaultValue = 0
function = NoOp
value = -2 Unused -2
value = -1 This patch needs further work before it can be merged
value = 0 No score
value = +1 Looks good to me
value = +2 Unused +2
[label "Rollcall-Vote"]
copyAllScoresOnTrivialRebase = true
defaultValue = 0
function = NoOp
value = -1 No
value = 0 Abstain
value = +1 Yes
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true