project.config: remove may-push group It was intended to be safe, but granted a fair few permissions that are at least a little iffy like tagging, and it's very rarely used. Remove it; I'll configure golang-gob-branchers for the relatively common case of creating a branch once the ganpati group finishes being created. Change-Id: I403b3b6e9ab921346fd87fedf25a453a15ef690f Reviewed-on: https://go-review.googlesource.com/c/All-Projects/+/456915 Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
diff --git a/groups b/groups index 5048d57..0bda594 100644 --- a/groups +++ b/groups
@@ -5,7 +5,6 @@ a68e77fe594e959daaacc2fb670298964f78acfa approvers adf76ba6894d57eca12698844876eafed66f9990 gerritbot c7bf27e6d6fe0835046491033e39afd234b33db5 may-abandon-changes -d6456e4d6da952f58af289d8a189acb7e451b298 may-push df7e96111acb673748b3161cac96c45ca77a5994 may-forge-author-identity global:Anonymous-Users Anonymous Users global:Registered-Users Registered Users
diff --git a/project.config b/project.config index 530c0b0..8dbf8bf 100644 --- a/project.config +++ b/project.config
@@ -20,12 +20,9 @@ push = group Registered Users pushMerge = group Registered Users [access "refs/heads/*"] - create = group may-push forgeAuthor = group gerritbot forgeAuthor = group may-forge-author-identity - forgeAuthor = group may-push forgeCommitter = group gerritbot - forgeCommitter = group may-push label-Code-Review = +0..+2 group approvers label-Code-Review = +0..+1 group Registered Users label-Hold = +0..+1 group approvers @@ -41,7 +38,6 @@ label-Auto-Submit = +0..+1 group approvers removeReviewer = group approvers abandon = group may-abandon-changes - push = group may-push [access "refs/for/refs/meta/config"] push = group mdb/gerritcodereview-eng push = group mdb/golang-gob-eng-policy @@ -57,13 +53,8 @@ abandon = group mdb/golang-gob-eng-policy push = group mdb/golang-gob-owners [access "refs/tags/*"] - push = group may-push create = group gobot - create = group may-push - forgeAuthor = group may-push - forgeCommitter = group may-push createTag = group gobot - createTag = group may-push [access "^refs/heads/(release|internal)-branch.+"] exclusiveGroupPermissions = label-Auto-Submit submit submit = group gobot