Add permission for pushing signed tag
The method that determines whether or not the user can create a new
Git ref checks if the tag contains a PGP signature, but it returns the
same result in both the `if` and `else` blocks.
The redundant check seems to be legacy of the changes in Idb56f65
where the create ref checks were refactored. Previously there was a
distinction between permissions to push an annotated tag and to push
a signed tag. There is now no distinction and the permission is
simply "push tag" (which actually refers to annotated tag).
Add a new permission for pushing signed tag, and use that when the
tag contains a PGP signature.
Change-Id: Ic32e0e60f8518b04e8325653e3e90edee834e629
4 files changed
