Setup: scm-manager 1.53 installed from Debian package on Ubuntu Server 16.04 LTS, connected to AD via LDAP plugin.
Having two different groups in AD (say g1 and g2), I want only members of g1 to be able to push to "default" branch of a Mercurial repo. So I've set up general permissions as (g1, is_group, WRITE) and (g2, is_group, WRITE) to allow general write access for members of both groups. So far everything works fine.
Now, when I enable branchwp and add (default, g1, is_group) and (default, g2, is_group, deny), and try to push as member of either group, I get this:
% hg push pushing to http://user@server/scm/hg/playground searching for changes remote: adding changesets remote: adding manifests remote: adding file changes remote: added 1 changesets with 1 changes to 1 files remote: ERROR: scm-hook failed with an unknown error remote: transaction abort! remote: rollback completed remote: pretxnchangegroup.scm hook failed abort: push failed on remote