A non-member can merge an MR to master

In terraform-images!40 (merged), a non-member was able to merge their own MR which created a commit in https://gitlab.com/gitlab-org/terraform-images.

This is highly unusual.

https://gitlab.slack.com/archives/CB07X8AQ3/p1606952445407900

All times UTC

2020-12-02T23:15:25.463Z: terraform-images!40 (comment 459216010) posted by wider community member
2020-12-02 23:40: @tigerwnz notifies #s_configure channel, requesting master be protected
2020-12-02 23:43: @tkuah adds a protected branch for master
2020-12-02 23:51: @tkuah raises a revert MR in terraform-images!41 (merged)

Edited Dec 04, 2020 by Thong Kuah