Right now, if on organization level only selected actions are allowed, this setting is repeated on repo level, though its just inherited. Example: eclipse-cbi org