summaryrefslogtreecommitdiff
path: root/testing/admin-patches/no-create-FOO.patch
diff options
context:
space:
mode:
Diffstat (limited to 'testing/admin-patches/no-create-FOO.patch')
-rw-r--r--testing/admin-patches/no-create-FOO.patch13
1 files changed, 13 insertions, 0 deletions
diff --git a/testing/admin-patches/no-create-FOO.patch b/testing/admin-patches/no-create-FOO.patch
new file mode 100644
index 0000000..b5d79a4
--- /dev/null
+++ b/testing/admin-patches/no-create-FOO.patch
@@ -0,0 +1,13 @@
+diff --git a/rules/project.lace b/rules/project.lace
+index aafa17c..388766a 100644
+--- a/rules/project.lace
++++ b/rules/project.lace
+@@ -43,6 +43,8 @@ include global:remoteconfigchecks op_is_config
+ # Okay, if we're altering the admin ref, in we go
+ include global:adminchecks is_admin_ref
+
++deny "No FOOs allowed" op_is_normal [target_tree is FOO]
++
+ # Now we're into branch operations. Owners can do any normal operation
+ # Normal ops are create/delete/fastforward on refs
+ allow "Owners can create refs" op_is_normal is_owner