Monty Taylor 1503552b6d Update acls to enforce pushing signed tags
We don't ever want non-signed tags anywhere - enforce this. (also,
the old setting is not a more permissive version, it is explicitly
a setting for only allowing unsigned, unannotaged tags)

Change-Id: I7836860f9e62bcb169bc13c5e3b5b5ecf6d325a1
2014-04-28 17:24:23 -07:00

24 lines
1020 B
Plaintext

[access "refs/heads/milestone-proposed"]
exclusiveGroupPermissions = label-Code-Review label-Workflow
create = group designate-milestone
label-Code-Review = -2..+2 group designate-milestone
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+1 group designate-milestone
[access "refs/heads/stable/*"]
exclusiveGroupPermissions = label-Code-Review label-Workflow
create = group designate-milestone
label-Code-Review = -2..+2 group designate-milestone
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+1 group designate-milestone
[access "refs/heads/*"]
label-Code-Review = -2..+2 group designate-core
label-Workflow = -1..+1 group designate-core
[access "refs/tags/*"]
create = group designate-milestone
pushSignedTag = group designate-milestone
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true