Monty Taylor 1503552b6d Update acls to enforce pushing signed tags
We don't ever want non-signed tags anywhere - enforce this. (also,
the old setting is not a more permissive version, it is explicitly
a setting for only allowing unsigned, unannotaged tags)

Change-Id: I7836860f9e62bcb169bc13c5e3b5b5ecf6d325a1
2014-04-28 17:24:23 -07:00

27 lines
1.2 KiB
Plaintext

[access "refs/heads/milestone-proposed"]
label-Code-Review = -2..+2 group mistral-milestone
label-Workflow = -1..+1 group mistral-milestone
exclusiveGroupPermissions = label-Code-Review label-Workflow
label-Code-Review = -1..+1 group Registered Users
[access "refs/heads/stable/*"]
label-Code-Review = -2..+2 group mistral-milestone
label-Workflow = -1..+1 group mistral-milestone
exclusiveGroupPermissions = label-Code-Review label-Workflow
label-Code-Review = -1..+1 group Registered Users
[access "refs/heads/release-*"]
label-Code-Review = -2..+2 group mistral-milestone
label-Workflow = -1..+1 group mistral-milestone
exclusiveGroupPermissions = label-Code-Review label-Workflow
label-Code-Review = -1..+1 group Registered Users
[access "refs/heads/*"]
label-Code-Review = -2..+2 group mistral-core
label-Workflow = -1..+1 group mistral-core
[access "refs/tags/*"]
create = group mistral-milestone
pushSignedTag = group mistral-milestone
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true