Modify access rules
diff --git a/groups b/groups index 9e3fe2e..fdd55ab 100644 --- a/groups +++ b/groups
@@ -1,7 +1,7 @@ # UUID Group Name # +62778f7f1b4d2f168dc97a8840f509439d184be5 admins d651a8840b2b5a967d0b04d4b0208969394c3010 nobody global:Anonymous-Users Anonymous Users global:Project-Owners Project Owners global:Registered-Users Registered Users -mdb:upspin-admin mdb/upspin-admin
diff --git a/project.config b/project.config index fb8e811..d264cdd 100644 --- a/project.config +++ b/project.config
@@ -10,46 +10,38 @@ mergeContent = true action = cherry pick [capability] - administrateServer = group mdb/upspin-admin + administrateServer = group admins [access "refs/*"] read = group Anonymous Users read = group Registered Users - read = group mdb/upspin-admin [access "refs/for/refs/*"] push = group Registered Users pushMerge = group Registered Users [access "refs/heads/*"] - create = group Project Owners - create = group mdb/upspin-admin + create = group nobody forgeAuthor = group Registered Users - forgeCommitter = group Project Owners - forgeCommitter = group mdb/upspin-admin - label-Code-Review = -2..+2 group Project Owners - label-Code-Review = -2..+2 group mdb/upspin-admin + forgeCommitter = group admins + label-Code-Review = -2..+2 group admins label-Code-Review = -1..+1 group Registered Users - submit = group Project Owners - submit = group mdb/upspin-admin - editTopicName = +force group Project Owners - editTopicName = +force group mdb/upspin-admin + submit = group admins + editTopicName = group admins push = +force group nobody - delete = group mdb/upspin-admin + delete = group nobody [access "refs/meta/config"] exclusiveGroupPermissions = read read = group Project Owners - read = group mdb/upspin-admin + read = group admins push = group Project Owners - push = group mdb/upspin-admin + push = group admins label-Code-Review = -2..+2 group Project Owners - label-Code-Review = -2..+2 group mdb/upspin-admin + label-Code-Review = -2..+2 group admins submit = group Project Owners - submit = group mdb/upspin-admin + submit = group admins create = group Project Owners - create = group mdb/upspin-admin + create = group admins [access "refs/tags/*"] - createTag = group Project Owners - createTag = group mdb/upspin-admin - createSignedTag = group Project Owners - createSignedTag = group mdb/upspin-admin + createTag = group nobody + createSignedTag = group nobody [label "Code-Review"] function = MaxWithBlock defaultValue = 0