From 2071cc3fc364994edc02407b52f67539aaf5be57 Mon Sep 17 00:00:00 2001
From: Fabian Arrotin <arrfab@centos.org>
Date: Jun 29 2022 10:54:39 +0000
Subject: Adding notes about granting 'commit' rights on git.c.o projects


Signed-off-by: Fabian Arrotin <arrfab@centos.org>

---

diff --git a/docs/buildsys/git.md b/docs/buildsys/git.md
index 91cebe5..e323786 100644
--- a/docs/buildsys/git.md
+++ b/docs/buildsys/git.md
@@ -59,6 +59,19 @@ Assuming that we are given a [list](https://pagure.io/centos-infra/issue/393), w
 cat kmod-list |while read project ; do pagure-batch-create-repo $project "the $project repo" rpms prod;done
 
 ```
+## Modifying ACLs on projects 
+
+While automatic ACLs coming from pagure-dist-git are in place to allow/deny SIG groups to push to some branches by default, pagure needs itself to be aware that some groups can review Pull Requests and merge these. For that we have to grant the 'commit' rights on specific projects (SIGs will still be disallowed to merge to protected branches).
+To do that one can use [simple and interactive](https://github.com/CentOS/infra-scripts/blob/master/pagure/pagure-acl-mod) or [batch](https://github.com/CentOS/infra-scripts/blob/master/pagure/pagure-batch-acl-mod) script, still using same config file as described above.
+
+If we have to do that for a list, we can for example use the `pagure-batch-acl-mod` script : 
+
+```
+fas_group="sig-hyperscale"
+namespace="rpms"
+cat pagure-acl.list |while read project ; do echo pagure-batch-acl-mod $namespace $project $fas_group prod ; done
+```
+
 
 ## Infra notes