Modify access rules
diff --git a/project.config b/project.config
index e080951..d7b5ba7 100644
--- a/project.config
+++ b/project.config
@@ -2,3 +2,12 @@
 	inheritFrom = All-Projects
 [submit]
 	action = rebase if necessary
+[access "refs/*"]
+	read = group Non-Interactive Users
+[access "refs/heads/*"]
+	abandon = group hafnium-approvers
+	create = group hafnium-approvers
+	label-Code-Review = -2..+2 group hafnium-approvers
+	label-Code-Review = -1..+1 group Non-Interactive Users
+	push = group hafnium-approvers
+	submit = group hafnium-approvers