add policy to prevent public PRs to personalizer folder

Author: gewarren

.github/policies/disallow-edits.yml

@@ -10,12 +10,58 @@ configuration:
           - payloadType: Pull_Request
           - isAction:
               action: Opened
-          - or:              
-              - filesMatchPattern:
-                  matchAny: true
-                  pattern: articles/index.*
+          - filesMatchPattern:
+              matchAny: true
+              pattern: articles/index.*
         then:
           - addReply:
               reply: >-
-                @${issueAuthor} - You tried to add an index file to this repository; this is not permitted so your pull request will be closed automatically. 
+                @${issueAuthor} - You tried to add an index file to this repository; this is not permitted so your pull request will be closed automatically.
           - closePullRequest
+
+      - description: Close PRs to the "ai-services/personalizer" folder where the author isn't a member of the MicrosoftDocs org (i.e. PRs in public repo).
+        if:
+          - payloadType: Pull_Request
+          - isAction:
+              action: Opened
+          - filesMatchPattern:
+              matchAny: true
+              pattern: articles/ai-services/personalizer/*
+          - not:
+              - activitySenderHasAssociation:
+                  association: Member
+        then:
+          - addReply:
+              reply: >-
+                @${issueAuthor} - Pull requests that modify files in this folder aren't accepted from public contributors.
+          - closePullRequest
+
+      - description: \@mention specific people when a PR is opened in the "ai-services/personalizer" folder.
+        if:
+          - payloadType: Pull_Request
+          - isAction:
+              action: Opened
+          - filesMatchPattern:
+              matchAny: true
+              pattern: articles/ai-services/personalizer/*
+          - activitySenderHasAssociation:
+              association: Member
+          - not:
+              or:
+                - isActivitySender:
+                    user: eric-urban
+                - isActivitySender:
+                    user: nitinme
+                - isActivitySender:
+                    user: mrbullwinkle
+        then:
+          - addReply:
+              reply: >-
+                @${issueAuthor} - Please don't sign off on this PR. The area owners will sign off once they've reviewed your contribution.
+          - mentionUsers:
+              mentionees:
+                - eric-urban
+                - nitinme
+                - mrbullwinkle
+              replyTemplate: ${mentionees} - Please review this PR and sign off when you're ready to merge it.
+              assignMentionees: True # This part probably won't work since the bot doesn't have write perms.