Hey all, I'm trying to create a policy which allows to create a commit, but does not allow to merge branches (or vise-versa), for all repositories and branches. I imagined the

arn

to be something like:

arn:lakefs:fs:::repository/*/branch/*

How-ever, It seems like both actions are defined using

fs:CreateCommit

. In other words, same action, same resource arn, different capabilities (merge vs commit). How can I achieve my goal?