Default access control for any hosted plugin project
diff --git a/groups b/groups
new file mode 100644
index 0000000..15aac80
--- /dev/null
+++ b/groups
@@ -0,0 +1,3 @@
+# UUID                                  	Group Name
+#
+global:Project-Owners                   	Project Owners
diff --git a/project.config b/project.config
index d8217f2..78d4fbd 100644
--- a/project.config
+++ b/project.config
@@ -2,3 +2,11 @@
 	inheritFrom = Public-Projects
 [project]
 	state = active
+[access "refs/heads/*"]
+	create = group Project Owners
+	push = group Project Owners
+	label-Code-Review = -2..+2 group Project Owners
+	label-Verified = -1..+1 group Project Owners
+	submit = group Project Owners
+[access "refs/tags/*"]
+	pushTag = group Project Owners