groups]
everyone=justindemaris,sholodak,fritschi,cwinfrey,wgthom, dmccallum, edalquist, apetro, bszabo, nbolton, awills, peterk, ggilbert, de3, faizan, esm, sbattaglia, serac, mmclaren, bourey, cdoyle, holdorph, jayshao, sbramhall, bjohnson, j
af30, pgazda, lindholm, mboyd,mmclaren,alesueur, slonas,velpi,brippe,paubry,pames,agherna, lfuller, tcarroll,phunnilemur,ceharris,gthompson,dotmatt,dschultz, gweaver, eolsson, acolebourne, saltybeagle, tuyly, jmarchal,olberger,benno, s
teiner, nmond, dima767,bradcupit,james,mpolizzotti,brianxlong,arybicki,mmoayyed,ykaya, rosey,nblair,steve.swinsburg
cas-clients-devs=justindemaris,sholodak,fritschi,cwinfrey,wgthom, sbattaglia, serac, mmclaren, paubry,pames,phunnilemur,dotmatt, ceharris, saltybeagle, jmarchal,olberger,bradcupit,brianxlong
cas-extension-devs=sbattaglia
cas-server-devs=sbattaglia,alesueur,velpi,serac,
infrastructure=edalquist, apetro, bszabo, sbattaglia, bourey, cdoyle, jayshao, jaf30, holdorph
cas-server4-devs=sbattaglia, velpi, serac
openregistry-devs=sbattaglia, benno, steiner, nmond, dima767,james,rosey
uportal-devs=acolebourne, apetro, arybicki, awills, bourey, bszabo, dschultz, edalquist, gthompson, holdorph, lfuller, nblair, sbattaglia, sbramhall, steve.swinsburg, tuyly

# Grant a global 'read' to all users, including anon.
# Authenticated users get 'read/write'
[/]
* = r
@everyone = rw

# Restrict 'read/write' on uPortal to developers with ICLAs
[/uPortal]
@everyone = r
@uportal-devs = rw

# Restrict 'read/write' on cas-clients to dedicated devs only
# Other developers lose their 'write' grant
[/cas-clients]
@everyone = r
@cas-clients-devs = rw

# Restrict 'read/write' on cas-extensions to dedicated devs only
# Other developers lose their 'write' grant
[/cas-extensions]
@everyone = r
@cas-extension-devs = rw

# Restrict 'read/write' on cas-server to dedicated devs only
# Other developers lose their 'write' grant
[/cas3]
@everyone = r
@cas-server-devs = rw


# Restrict 'read/write' on cas-server4 to dedicated devs only
# Other developers lose their 'write' grant
[/cas4]
@everyone = r
@cas-server4-devs = rw

# Restrict 'read/write' on OpenRegistry to dedicated devs only
# Other developers lose their 'write' grant
[/openregistry]
@everyone = r
@openregistry-devs = rw