Sync Designate ACLs

This change sync's designate ACLs with the other project in
the openstack/ namespace.

The only exception is stable/* in the designate repository,
where designate-core retain approval rights.

Change-Id: Ie14946e5f749a0c91e382dac0b06abefd4234ee2

modules/openstack_project/files/gerrit/acls/openstack/designate-specs.config

@@ -3,9 +3,6 @@ abandon = group designate-core
 label-Code-Review = -2..+2 group designate-core
 label-Workflow = -1..+1 group designate-core
 
-[access "refs/tags/*"]
-pushSignedTag = group designate-milestone
-
 [receive]
 requireChangeId = true
 requireContributorAgreement = true

modules/openstack_project/files/gerrit/acls/openstack/designate.config

@@ -3,24 +3,16 @@ abandon = group designate-core
 label-Code-Review = -2..+2 group designate-core
 label-Workflow = -1..+1 group designate-core
 
-[access "refs/heads/proposed/*"]
-abandon = group designate-milestone
-create = group designate-milestone
-exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
-label-Code-Review = -2..+2 group designate-milestone
-label-Code-Review = -1..+1 group Registered Users
-label-Workflow = -1..+1 group designate-milestone
-
 [access "refs/heads/stable/*"]
-abandon = group designate-milestone
+create = group designate-ptl
-create = group designate-milestone
+label-Code-Review = -2..+2 group openstack-stable-maint
-exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Workflow = -1..+1 group openstack-stable-maint
-label-Code-Review = -2..+2 group designate-milestone
-label-Code-Review = -1..+1 group Registered Users
-label-Workflow = -1..+1 group designate-milestone
 
-[access "refs/tags/*"]
+[access "refs/heads/proposed/*"]
-pushSignedTag = group designate-milestone
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+abandon = group designate-milestone
+label-Code-Review = -2..+2 group designate-milestone
+label-Workflow = -1..+1 group designate-milestone
 
 [receive]
 requireChangeId = true

modules/openstack_project/files/gerrit/acls/openstack/python-designateclient.config

@@ -4,7 +4,7 @@ label-Code-Review = -2..+2 group designate-core
 label-Workflow = -1..+1 group designate-core
 
 [access "refs/tags/*"]
-pushSignedTag = group designate-milestone
+pushSignedTag = group designate-ptl
 
 [receive]
 requireChangeId = true