Allow Developer role read-only access to push_rule API endpoint
## Problem to solve Currently, the push_rule API endpoint (`GET /projects/:id/push_rule`) requires Maintainer role or above to access. This prevents developers from querying push rules before pushing code, whether as humans or via AI agents/flows. Developers need read-only access to understand what push rules are configured on a project so they can: - Validate their commits will pass push rule checks before pushing - Understand project-specific requirements (commit message format, file restrictions, etc.) - Enable AI agents and automation flows to check compliance before attempting operations ## Intended users - [Sasha (Software Developer)](https://about.gitlab.com/handbook/marketing/product-marketing/roles-personas/#sasha-software-developer) - [Devon (DevOps Engineer)](https://about.gitlab.com/handbook/marketing/product-marketing/roles-personas/#devon-devops-engineer) - AI agents and automation flows running with Developer permissions ## User experience goal Developers should be able to programmatically query push rules via the API to understand project constraints without requiring Maintainer access. ## Proposal Enable read-only access to the push_rule API endpoint for users with Developer role or above: - `GET /projects/:id/push_rule` - should be accessible to Developer+ role This allows developers to: 1. Query push rules before pushing 2. Validate commits against configured rules 3. Enable automation and AI flows to check compliance ## Permissions and Security - Read-only access only (no modifications) - Consistent with other read-only API endpoints available to Developers - No security risk as push rules are project configuration, not sensitive data ## Documentation Update [Project Push Rules API documentation](https://docs.gitlab.com/ee/api/projects.html#push-rules-starter) to reflect Developer+ access for read operations. ## What does success look like? - Developers can call `GET /projects/:id/push_rule` without Maintainer role - AI agents and automation flows can query push rules with Developer-level tokens - Developers understand project push rule requirements before pushing
issue