Under the: settings > "branch permissions" section of our repo I setup permissions on the master branch so that only one user has write permissions. I also checked the boxes for "Prevent rewriting history", "Prevent branch deletion", and "Prevent changes without a pull request". The permission is setup using the branch name, not any wildcards.
Under the "hooks" section I also have "Reject Force Push" enabled.
Despite these settings any user and push to the master branch from their local copy of the repo. They can also force push and force push a previous commit (removing the latest commits).
Stash is V3.11.2 (Updated today, this issue also occurred in V3.10.2)
Any ideas as to why Stash is ignoring these settings? This is a serious issue for us.