RFC 167: Enforce repository permissions

Created by: unknwon

Part of RFC 167.