Our users have REPO_WRITE permissions, because they work in own branches, which should be pushed on server finally. We have restricted branch naming with pre-receive hook. It works if user pushes branch from local repository. But some curious users found out that they could "Create branch" from interface, and pre-receive hook does not work in this case. It seems to be right, because branch creating is not push. But Stash server contain only bare repositories, so, probably branch firstly created somewhere else and than branch is pushed, so pre-receive hook have to run. So it is critically desirable to have mechanism to restrict branch naming or to run pre-receive hook when branch created from interface.

Why critically? Because create branch Ab/1/2 and ab/1 breaks repository (Stash could not distinguish Upper/lower case in branches). So we have to restrict it (but not only it, of cause).

from answers https://answers.atlassian.com/questions/324327/how-to-control-create-branch