blob: e5f05beab568cebd024d9f2afed1812aca0e85e3 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
|
# _____
# |_ _| __ _____ _____
# | || '__/ _ \ \ / / _ \
# | || | | (_) \ V / __/
# |_||_| \___/ \_/ \___|
#
# Copyright 2012,2013 Codethink Limited
#
# Rules for any repository not under {{ TROVE_ID }}
# This is, by default, /baserock/ and /delta/
# There are two classes of accessors here. Lorry and Others
allow "Anyone may read here" op_read
allow "Anyone may write here" op_write !is_anonymous
# Lorry can do anything reffy which is not inside the local refs
allow "Lorry may touch everything but refs/heads/{{ TROVE_ID }}" op_is_reffy is_lorry !is_local_ref
# Noone can rewind/rebase outside of their personal refs
deny "Non-personal branches may not be rewound/rebased" op_forcedupdate !is_lorry !ref_is_personal
# Everyone else can do reffy things inside refs/heads/{{ TROVE_ID }}
allow "Project writers may alter any refs" op_is_reffy !is_lorry is_local_ref
|
