Developers can rewrite history (push --force on master)
Created by: tback
Result: A user with the role developer can rewrite history.
Expected result: forced pushes from developers are rejected (at least on certain branches)
Reproduce: create test repository
git clone git:gitlab:/group/testtheforce.git
echo 1 > file
git add file
git commit -a -m 1
echo 2 >> file
git commit -a -m 2
git push
git reset --hard 'HEAD^'
git push --force```
Context:
gitlab 6.2.0 via Bitnami, ldap authentication