Hi everyone,
I am really struggling with branch permission setup.
I set the below permissions up for all repo's in our company. I was told by devs that this would 1. make sure no one can write direct to develop branch (our main branch) and 2. make sure every merge attempt required at least 1 approval.
What I found today was that my team has found a way around this - they make a new branch (which is fine) - let's call it "test-branch-1". This new branch doesn't have any permissions. They then create a pull request and are able to click "merge" without actually adding a reviewer.

My ideal state is that everyone can review each other's code, but no one should be able to merge to master OR develop without 1 approval.
Any help would be appreciated. I'm relatively new to git management.