preventing destructive operations to central repository

Let's say you have a bare git repository writeable by a number of different people. How do you prevent them from borking the central repository?

Also, is there an automated mechanism to ensure that the timeline stays clean? Say, force people to rebase their repositories before merging into the shared repository?

Thanks