As a part of the release owner responsibility, only release owners should have merge rights on the release branch that they manage. Request that for the just created release-4.0 branch, this be restricted to the following people, - srangana