Modify access rules
diff --git a/groups b/groups
index 8859adf..9194cd7 100644
--- a/groups
+++ b/groups
@@ -1,6 +1,7 @@
# UUID Group Name
#
10f1f90b56e5c67fe3754f0e79a11078d3be27f7 Approvers
+eac29dd93c6a9726e9744c4ad1453d4788f21717 Admins
global:Anonymous-Users Anonymous Users
global:Project-Owners Project Owners
global:Registered-Users Registered Users
diff --git a/project.config b/project.config
index 4588d27..a8c8505 100644
--- a/project.config
+++ b/project.config
@@ -9,6 +9,7 @@
mergeContent = true
action = cherry pick
[capability]
+ administrateServer = group Admins
administrateServer = group mdb/cuelang-repo
gerrit-google-manageUsersGet = group mdb/copybara-git-readers
viewAllAccounts = group mdb/copybara-git-readers
@@ -24,45 +25,59 @@
push = group Registered Users
pushMerge = group Registered Users
[access "refs/heads/*"]
+ create = group Admins
create = group Project Owners
create = group mdb/cuelang-repo
+ editTopicName = +force group Admins
editTopicName = +force group Project Owners
editTopicName = +force group mdb/cuelang-repo
forgeAuthor = group Registered Users
forgeAuthor = group mdb/copybara-git-writers
+ forgeCommitter = group Admins
forgeCommitter = group Project Owners
forgeCommitter = group mdb/copybara-git-writers
forgeCommitter = group mdb/cuelang-repo
+ label-Code-Review = -2..+2 group Admins
label-Code-Review = -2..+2 group Approvers
label-Code-Review = -2..+2 group Project Owners
label-Code-Review = -2..+2 group mdb/cuelang-repo
label-Code-Review = -1..+1 group Registered Users
+ push = group Admins
push = group Project Owners
push = group mdb/copybara-git-writers
push = group mdb/cuelang-repo
+ submit = group Admins
submit = group Project Owners
submit = group mdb/cuelang-repo
[access "refs/meta/config"]
exclusiveGroupPermissions = read
+ create = group Admins
create = group Project Owners
create = group mdb/cuelang-repo
label-Code-Review = -2..+2 group Approvers
label-Code-Review = -2..+2 group Project Owners
label-Code-Review = -2..+2 group mdb/cuelang-repo
+ push = group Admins
push = group Project Owners
push = group mdb/cuelang-repo
+ read = group Admins
read = group Project Owners
read = group mdb/cuelang-repo
+ submit = group Admins
submit = group Approvers
submit = group Project Owners
submit = group mdb/cuelang-repo
[access "refs/tags/*"]
+ create = group Admins
create = group Project Owners
create = group mdb/cuelang-repo
+ createSignedTag = group Admins
createSignedTag = group Project Owners
createSignedTag = group mdb/cuelang-repo
+ createTag = group Admins
createTag = group Project Owners
createTag = group mdb/cuelang-repo
+ forgeCommitter = group Admins
forgeCommitter = group Project Owners
forgeCommitter = group mdb/cuelang-repo
[label "Code-Review"]
