From a24728e069f3abf63cacd10a9c20784b367417db Mon Sep 17 00:00:00 2001
From: Kiall Mac Innes <kiall@hp.com>
Date: Thu, 17 Jul 2014 14:15:08 +0100
Subject: [PATCH] Sync Designate ACLs

This change sync's designate ACLs with the other project in
the openstack/ namespace.

The only exception is stable/* in the designate repository,
where designate-core retain approval rights.

Change-Id: Ie14946e5f749a0c91e382dac0b06abefd4234ee2
---
 .../acls/openstack/designate-specs.config     |  3 ---
 .../gerrit/acls/openstack/designate.config    | 24 +++++++------------
 .../openstack/python-designateclient.config   |  2 +-
 3 files changed, 9 insertions(+), 20 deletions(-)

diff --git a/modules/openstack_project/files/gerrit/acls/openstack/designate-specs.config b/modules/openstack_project/files/gerrit/acls/openstack/designate-specs.config
index c4ed793c0f..558c912030 100644
--- a/modules/openstack_project/files/gerrit/acls/openstack/designate-specs.config
+++ b/modules/openstack_project/files/gerrit/acls/openstack/designate-specs.config
@@ -3,9 +3,6 @@ abandon = group designate-core
 label-Code-Review = -2..+2 group designate-core
 label-Workflow = -1..+1 group designate-core
 
-[access "refs/tags/*"]
-pushSignedTag = group designate-milestone
-
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/modules/openstack_project/files/gerrit/acls/openstack/designate.config b/modules/openstack_project/files/gerrit/acls/openstack/designate.config
index 7f48430b0e..41643729fb 100644
--- a/modules/openstack_project/files/gerrit/acls/openstack/designate.config
+++ b/modules/openstack_project/files/gerrit/acls/openstack/designate.config
@@ -3,24 +3,16 @@ abandon = group designate-core
 label-Code-Review = -2..+2 group designate-core
 label-Workflow = -1..+1 group designate-core
 
-[access "refs/heads/proposed/*"]
-abandon = group designate-milestone
-create = group designate-milestone
-exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
-label-Code-Review = -2..+2 group designate-milestone
-label-Code-Review = -1..+1 group Registered Users
-label-Workflow = -1..+1 group designate-milestone
-
 [access "refs/heads/stable/*"]
-abandon = group designate-milestone
-create = group designate-milestone
-exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
-label-Code-Review = -2..+2 group designate-milestone
-label-Code-Review = -1..+1 group Registered Users
-label-Workflow = -1..+1 group designate-milestone
+create = group designate-ptl
+label-Code-Review = -2..+2 group openstack-stable-maint
+label-Workflow = -1..+1 group openstack-stable-maint
 
-[access "refs/tags/*"]
-pushSignedTag = group designate-milestone
+[access "refs/heads/proposed/*"]
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+abandon = group designate-milestone
+label-Code-Review = -2..+2 group designate-milestone
+label-Workflow = -1..+1 group designate-milestone
 
 [receive]
 requireChangeId = true
diff --git a/modules/openstack_project/files/gerrit/acls/openstack/python-designateclient.config b/modules/openstack_project/files/gerrit/acls/openstack/python-designateclient.config
index c4ed793c0f..b5b298ecde 100644
--- a/modules/openstack_project/files/gerrit/acls/openstack/python-designateclient.config
+++ b/modules/openstack_project/files/gerrit/acls/openstack/python-designateclient.config
@@ -4,7 +4,7 @@ label-Code-Review = -2..+2 group designate-core
 label-Workflow = -1..+1 group designate-core
 
 [access "refs/tags/*"]
-pushSignedTag = group designate-milestone
+pushSignedTag = group designate-ptl
 
 [receive]
 requireChangeId = true