I noticed that once a team member have write access. they can do manual deploy on any of the pipeline base on any of the branch. I know you can stop a team member from pushing into a branch. But if you can manually deploy into any pipeline then i can create my own branch and deploy into production pipeline. if though i'm not suppose to.
