When all of these conditions are met:
Repository projects include all of Restricted Project
Ref type is branch (git/hg)
Ref name is master
Ref change type has bit dangerous change
Take these actions every time this rule matches:
Block push with message: You can not rewrite or delete "master".