From d2739de62da0b90398792696b8563923e4f6d23f Mon Sep 17 00:00:00 2001
From: Tim Schubert <timschubert@users.noreply.github.com>
Date: Tue, 30 Oct 2018 13:09:28 +0100
Subject: [PATCH] Add note about default permission

---
 README.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.md b/README.md
index e7db621..e7ec8f2 100644
--- a/README.md
+++ b/README.md
@@ -70,6 +70,10 @@ The key will be used by the CI script to fetch from the student projects.
 
 At last, you can add everyone with permission to view all student solutions to the group of the course.
 
+## Permissions
+
+Configure Gitlab to allow developers to push on the master branch, but not force push to protected branches. An easy way to achieve this is to set Gitlab to "Partially Protected". A sane default is also to not allow students to create new projects.
+
 ## Checking student solutions
 
 When you have reachd the deadline for an exercise, push a new tag to `<course>/abgabesystem` to trigger the plagiarism checker and automatically create a tag in each student project.