How to prevent rewrites on all branches without giving everyone access?

titusn

This question is in reference to Atlassian Documentation: Using branch permissions

Recently Bitbucket has changed the branch permissions, so they include the settings for rewrites and branch deletion. Now it is not clear how to nest the permissions anymore. What we want is these settings:

BitBucket Branch Management.PNG

So we want only process reviewers to be able to acces develop and only release managers on master and any release branches. master and develop must never be deleted and no branch must ever be rebased. In the new settings we can set this:
Screen Shot 2016-09-15 at 14.43.12.png

Which is fine except for one potential problem. Doesn't this still allow rewrites on any branch except the three patterns mentioned? And if we add * as a pattern for `everyone`, just to deactivate rewrites, doesn't that overlap and give everyone write access to the branches that should be limited to specific groups?

BitBucket Branch Management.PNG

Screen Shot 2016-09-15 at 14.55.10.png

Broken branch permissions.PNG

Screen Shot 2016-09-15 at 14.43.12.png

titusn

Should it indeed be:

Screen Shot 2016-09-15 at 14.55.10.png