Hi, I try to create repositories that are Read-Only for the group _authenticated. Each user that want to write into this "master" repository, should create a fork.
This fork should be RW for every _authenticated user.
So I created the group _authenticated and give it the "All Repositories (Write)" access permission. In the master repository I set the group permission for _authenticated to READ.
If a authenticated user try to push into this repository, he can. The repository permission does not take effect.
I would expect, that the repository permissions would prevent the authenticated user to write into this repository.