blob: e1f6696148f0f1367a9431008cdb2b43d908ef0f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
# Rules for ctxxx/... repositories
# Reading the repository
allow "Readers gonna read" op_read ct_reader
deny "This repository not for you" op_read
# Basic writes to the repo
allow "Writers gonna write" op_write ct_writer
deny "This repository not for you" op_write
# Ref based rules for the repo
## Master
allow "Master may be created" op_createref master_ref
allow "Master may be altered" op_is_update master_ref
deny "Master may not be deleted" op_deleteref master_ref
## Anything else.
allow "Writers gonna write" op_is_reffy !master_ref
|
