diff --git a/project.config b/project.config
index 9f44c18..5f19c35 100644
--- a/project.config
+++ b/project.config
@@ -24,9 +24,9 @@
 	label-Verified = -1..+1 group gerrit-trusted-contributors
 	label-Commit-Queue = +0..+2 group luci_scoped_account
 	labelAs-Commit-Queue = +0..+2 group luci_scoped_account
-	submit = group luci_scoped_account
-	submitAs = group luci_scoped_account
 	submit = group Project Owners
+	submitAs = group luci_scoped_account
+	submit = group luci_scoped_account
 	editTopicName = +force group Project Owners
 	editTopicName = +force group gerrit-trusted-contributors
 	viewPrivateChanges = group gerrit-ci
@@ -50,6 +50,7 @@
 	pushMerge = group Project Owners
 	pushMerge = group google/gerritcodereview-maintainers@googlegroups.com
 [access "refs/for/*"]
+	addPatchSet = group Project Owners
 	addPatchSet = group gerrit-trusted-contributors
 	addPatchSet = group google/gerritcodereview-maintainers@googlegroups.com
 	addPatchSet = block group Anonymous Users