[project]
	description = Access inherited by all other projects.
[receive]
	requireContributorAgreement = true
	requireSignedOffBy = false
	requireChangeId = true
	createNewChangeForAllNotInTarget = false
[submit]
	mergeContent = false
	action = cherry pick
[capability]
	administrateServer = group mdb/boringssl-committers
[access "refs/*"]
	read = group Anonymous Users
	read = group luci-config-service-account
	read = group mdb/boringssl-committers
[access "refs/for/refs/*"]
	push = group Registered Users
	pushMerge = group Registered Users
[access "refs/heads/*"]
	create = group Project Owners
	create = group mdb/boringssl-committers
	forgeAuthor = group Registered Users
	forgeCommitter = group Project Owners
	forgeCommitter = group mdb/boringssl-committers
	push = group Project Owners
	push = group mdb/boringssl-committers
	label-Code-Review = -2..+2 group External submitters
	label-Code-Review = -2..+2 group Project Owners
	label-Code-Review = -2..+2 group mdb/boringssl-committers
	label-Code-Review = -1..+1 group Registered Users
	label-Commit-Queue = +0..+2 group External submitters
	label-Commit-Queue = +0..+2 group Project Owners
	label-Commit-Queue = +0..+2 group mdb/boringssl-committers
	labelAs-Commit-Queue = group commit-queue-bot
        label-CQ-Verified = -1..+1 group commit-queue-bot
	submit = group External submitters
	submit = group Project Owners
	submit = group commit-queue-bot
	submit = group mdb/boringssl-committers
	editTopicName = +force group Project Owners
	editTopicName = +force group mdb/boringssl-committers
[access "refs/meta/config"]
	exclusiveGroupPermissions = read
	read = group Project Owners
	read = group mdb/boringssl-committers
	push = group Project Owners
	push = group mdb/boringssl-committers
	label-Code-Review = -2..+2 group Project Owners
	label-Code-Review = -2..+2 group mdb/boringssl-committers
	submit = group Project Owners
	submit = group mdb/boringssl-committers
[access "refs/tags/*"]
	pushTag = group Project Owners
	pushTag = group mdb/boringssl-committers
	pushSignedTag = group Project Owners
	pushSignedTag = group mdb/boringssl-committers
[label "Code-Review"]
	function = MaxWithBlock
	defaultValue = 0
	copyMinScore = true
	value = -2 This shall not be merged
	value = -1 I would prefer this is not merged as is
	value =  0 No score
	value = +1 Looks good to me, but someone else must approve
	value = +2 Looks good to me, approved
[label "Commit-Queue"]
	function = NoBlock
	abbreviation = CQ
	value =  0 Not Ready
	value = +1 Dry Run
	# Comment the following line if you want to disallow automatic CQ commits.
	# Note, that CQ just "clicks" Submit button, so all the usual checks 
	# (such as Code-Review +2) are applied by Gerrit.
	value = +2 Ready
	defaultValue = 1

# Label CQ Verified is not required for CQ operation, it's for UI only,
# unless you choose to require this to be set in order to submit a change.
# So, feel free to remove this and change infra/config/cq.cfg as well.
[label "CQ-Verified"]
	# Change to Block if you want to require Verified +1 to land,
	# in which case you'd probably want to let committers set it manually as well.
	function = NoBlock
	abbreviation = CQV
	value = -1 Failed CQ verifiers
	value =  0 Unknown
	value = +1 Passed CQ verifiers
	defaultValue = 0

[access "refs/heads/chromium-stable"]
	push = +force group mdb/boringssl-committers
[access "refs/heads/master-with-bazel"]
	push = group Bazel robots
	push = group mdb/boringssl-commiters
[access "refs/for/*"]
	addPatchSet = group Registered Users