summaryrefslogtreecommitdiff
path: root/gitano-admin/rules/remoteconfigchecks.lace
diff options
context:
space:
mode:
Diffstat (limited to 'gitano-admin/rules/remoteconfigchecks.lace')
-rw-r--r--gitano-admin/rules/remoteconfigchecks.lace9
1 files changed, 9 insertions, 0 deletions
diff --git a/gitano-admin/rules/remoteconfigchecks.lace b/gitano-admin/rules/remoteconfigchecks.lace
new file mode 100644
index 0000000..80cf802
--- /dev/null
+++ b/gitano-admin/rules/remoteconfigchecks.lace
@@ -0,0 +1,9 @@
+# Remote config checks
+
+# Owners may do any remote admin operation they choose
+allow "Owners may remote-admin their repositories" is_owner
+
+# ctxxx-admins may remote-admin ctxxx repositories
+allow "Project admins may admin project repos" repo_has_project_code ct_admins
+
+deny "You may not configure this repository remotely"