tree 9ca5e52b79760e15c82a840fe2c415aaad75a3a0
parent 6d4969a435ef77e241154783516819016f4a7f23
author Luca Milanesio <luca.milanesio@gmail.com> 1785171603 +0200
committer Luca Milanesio <luca.milanesio@gmail.com> 1785493187 -0700

Warn about the dangers of allowing auto-merge on push

When granting the submit permission on refs/for/* and refs/* the ACLs
are effectively bypassed because of the ability to push to any branch
without any gates, including privilege escalation.

Make the existing note more prominent and explicitly mention the danger
of privilege escalation.

Release-Notes: Clarify the impact of granting Submit on refs/* and refs/for/*
Change-Id: I24653b4efd25d2471d4e4e8737b9d1c45174443c