The write_repository allow read action.
It is needed to offer Maintainer role in order to affect protected branch.