Deny 'Blocked Users' from reading all refs
May help in preventing spam.
Change-Id: I48a65eb7aa4f38601d4aeb1d560c74cb54e640f1
diff --git a/groups b/groups
index 44a0f24..f9db0aa 100644
--- a/groups
+++ b/groups
@@ -1,5 +1,6 @@
# UUID Group Name
#
+00fba069826520dec109eef49f3914dde6f1673f Blocked Users
18cf7f27ecb1f1d727d16d5dfeaf019d9b9f5c83 Administrators
2d17ca3ba578ebe9e0798efc4ca023f2685f7856 aom-googlers
6aa943a8d1abd393ddcd472d7f0d857acb942d46 aom-interns
diff --git a/project.config b/project.config
index b9f4d39..374b6ae 100644
--- a/project.config
+++ b/project.config
@@ -8,6 +8,7 @@
[submit]
mergeContent = true
[access "refs/*"]
+ read = deny group Blocked Users
read = group Administrators
read = group Anonymous Users
revert = deny group Anonymous Users
@@ -89,7 +90,8 @@
overrideIf = label:Bot-Commit=+1 AND -label:Code-Review=MIN
canOverrideInChildProjects = true
[submit-requirement "No-Unresolved-Comments"]
- description = Changes that have unresolved comments are not submittable. Unless overridden with "Unresolved-Comment-Reason: <reason>" line in change message.
- overrideIf = message:\"^.*Unresolved-Comment-Reason:.*\"
+ description = Changes that have unresolved comments are not submittable. Unless overridden with Unresolved-Comment-Reason: <reason> line in change message.
applicableIf = has:unresolved
- submittableIf = -has:unresolved
\ No newline at end of file
+ submittableIf = -has:unresolved
+ overrideIf = message:\"^.*Unresolved-Comment-Reason:.*\"
+ canOverrideInChildProjects = false
