diff --git a/project.config b/project.config
index b8fe757..89f94c4 100644
--- a/project.config
+++ b/project.config
@@ -43,3 +43,7 @@
 	push = group google/gerritcodereview-maintainers@googlegroups.com
 	pushMerge = group Project Owners
 	pushMerge = group google/gerritcodereview-maintainers@googlegroups.com
+[access "refs/for/*"]
+	addPatchSet = group google/gerritcodereview-maintainers@googlegroups.com
+	addPatchSet = group gerrit-verifiers
+	addPatchSet = block group Anonymous Users