diff options
Diffstat (limited to 'gitano-admin/rules/adminchecks.lace')
-rw-r--r-- | gitano-admin/rules/adminchecks.lace | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/gitano-admin/rules/adminchecks.lace b/gitano-admin/rules/adminchecks.lace new file mode 100644 index 0000000..9d4864b --- /dev/null +++ b/gitano-admin/rules/adminchecks.lace @@ -0,0 +1,18 @@ +# Core project administration rules + +# Called with ref known to be refs/gitano/admin + +# Administrators already got to do anything, so this is for non-admins + +# Non-admin members may not delete the admin ref +deny "Non-administrators may not delete the admin ref" op_deleteref + +# Otherwise, the project's owner is allowed to alter the admin tree +allow "Project owner may alter the admin ref" is_owner + +# Project admins may alter admin +allow "Project admins may alter the admin ref of project repos" repo_has_project_code ct_admin + +# Any other opportunities for altering the admin ref must be provided +# by the project's rules +
\ No newline at end of file |