[project]
	description = Access inherited by all other projects.
[receive]
	requireSignedOffBy = true
	requireChangeId = true
	enableSignedPush = false
	createNewChangeForAllNotInTarget = false
	maxObjectSizeLimit = 2m
	requireSignedPush = false
	rejectImplicitMerges = true
[submit]
	mergeContent = true
	action = fast forward only
[access "refs/*"]
	read = deny group GitHub Replication - Open-Cloud
	read = deny group GitHub Replication - OpenCord
	read = deny group GitHub Replication - XOS-Project
	read = deny group GitHub Replication - opennetworkingfoundation
	read = group Administrators
	read = group Anonymous Users
	read = group LF-Devs
	read = group Registered Users
	read = group Service Users
	viewDrafts = group user/Cloud Lab (cloudlab)
	deleteDrafts = block group Read-only Users
	publishDrafts = block group Read-only Users
	revert = group Registered Users
	viewPrivateChanges = group Service Users
[access "refs/heads/*"]
	create = group Administrators
	create = group Project Owners
	forgeAuthor = group Administrators
	forgeAuthor = group Project Owners
	forgeCommitter = group Administrators
	forgeCommitter = group Project Owners
	label-Code-Review = -2..+2 group Administrators
	label-Code-Review = -2..+2 group Project Owners
	label-Code-Review = -1..+1 group Registered Users
	submit = group Administrators
	submit = group Project Owners
	label-Verified = -1..+1 group Administrators
	label-Verified = -1..+1 group OverrideVerify
	label-Verified = -1..+1 group Service Users
[access "refs/meta/config"]
	exclusiveGroupPermissions = read
	read = group Administrators
	read = group Anonymous Users
	read = group Registered Users
	push = group Administrators
	label-Code-Review = -2..+2 group Administrators
	label-Code-Review = -2..+2 group Project Owners
	submit = group Administrators
	submit = group Project Owners
	pushMerge = group Administrators
	create = group Administrators
	create = group Project Owners
[access "refs/tags/*"]
	createTag = group Administrators
	createTag = group Project Owners
	createTag = group Service Users
	createSignedTag = group Administrators
	createSignedTag = group Project Owners
	createSignedTag = group Service Users
	create = group Service Users
[label "Code-Review"]
	function = MaxWithBlock
	defaultValue = 0
	copyMinScore = true
	copyAllScoresOnTrivialRebase = true
	value = -2 This shall not be merged
	value = -1 I would prefer this is not merged as is
	value = 0 No score
	value = +1 Looks good to me, but someone else must approve
	value = +2 Looks good to me, approved
[label "Verified"]
    function = MaxWithBlock
    value = -1 Fails
    value = 0 No score
    value = +1 Verified
	defaultValue = 0
[access "refs/drafts/*"]
	publishDrafts = group Registered Users
	viewDrafts = group Administrators
	deleteDrafts = group Administrators
[access "refs/for/refs/heads/*"]
	forgeAuthor = group Project Owners
	push = group Administrators
	push = group Registered Users
[access "refs/for/*"]
	addPatchSet = group Registered Users
[access "refs/for/refs/meta/config"]
	push = group Administrators
[capability]
	accessDatabase = group Administrators
	administrateServer = group Administrators
	modifyAccount = group Administrators
	priority = batch group Service Users
	streamEvents = group Service Users
	viewAllAccounts = group Administrators
[plugin "reviewers-by-blame"]
	ignoreDrafts = true
	maxReviewers = 3