Monty Taylor 1503552b6d Update acls to enforce pushing signed tags
We don't ever want non-signed tags anywhere - enforce this. (also,
the old setting is not a more permissive version, it is explicitly
a setting for only allowing unsigned, unannotaged tags)

Change-Id: I7836860f9e62bcb169bc13c5e3b5b5ecf6d325a1
2014-04-28 17:24:23 -07:00

22 lines
688 B
Plaintext

[access "refs/*"]
owner = group Administrators
create = group taskflow-core
[access "refs/heads/*"]
label-Code-Review = -2..+2 group taskflow-core
label-Workflow = -1..+1 group taskflow-core
[access "refs/heads/stable/*"]
exclusiveGroupPermissions = label-Code-Review label-Workflow
label-Code-Review = -2..+2 group taskflow-core
label-Code-Review = -1..+1 group Registered Users
label-Workflow = -1..+1 group taskflow-core
[access "refs/tags/*"]
create = group taskflow-ptl
pushSignedTag = group taskflow-ptl
[project]
state = active
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true