Protected branch merge restrictions has no effect
In mutter, currently, in the Settings -> Repository -> Protected branches panel, the master branch is configured to only allow "Maintainers" to merge. This seems to have no effect, as "Developers" are still able to see the merge request button, and also merge merge requests.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information