git - How to disable direct push to Gerrit? -

while working gerrit, expected push is:

git push origin head:refs/for/branch 

but bad guys seems in simple way(they learned git manual):

git push origin 

or

git push 

these operation cause serious problems:

• the commit merged directly master (or default) branch in remote server.
• although guys write commit message, git log can'not find them.
• maybe more...

is there way disable these push operation in gerrit settings? or disable in client?

there permissions in gerrit admin ui. permissions inherited all-projects project. have there (admin => project => all-projects => access) , remove push right on master. more details in doc here: access control