project.config: use CRIA for approvers and trybots groups
To prevent skew between LUCI and Gerrit permissions, use CRIA groups for
everything.
I've flip-flopped on my previous position that groups shouldn't be
nested. So in CRIA, mdb/golang-team is a member of approvers, and
approvers is a member of trybots. As such we never need both approvers
and trybots in an ACL.
I left gobot out of the approvers group, which is a change from
today. I tried to use good judgment about which permissions to grant it,
so it has lost a couple that I don't think it needs.
In a week or so I'll clear out and hide the groups.
Change-Id: Iae1e3e09c9c9efb697eb21060e0f645b39a2cb36
Reviewed-on: https://go-review.googlesource.com/c/All-Projects/+/493621
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
2 files changed
