branchrestriction

record branchrestriction {
  type-op: string,
  groups: option​<list​<group>>,
  users: option​<list​<account>>,
}