Modify access rules
diff --git a/project.config b/project.config
index 3ea1c62..bb1cd74 100644
--- a/project.config
+++ b/project.config
@@ -18,69 +18,37 @@
 	read = group Anonymous Users
 	read = group Non-Interactive Users
 	read = group Registered Users
-	create = group Administrators
-	create = group Non-Interactive Users
-	create = block group Read-only Users
-	forgeAuthor = group Project Owners
-	forgeAuthor = block group Read-only Users
-	forgeCommitter = block group Read-only Users
-	forgeServerAsCommitter = block group Read-only Users
-	push = block group Read-only Users
-	pushMerge = block group Read-only Users
-	label-Code-Review = group Read-only Users
-	label-Verified = group Read-only Users
-	labelAs-Code-Review = group Read-only Users
-	labelAs-Verified = group Read-only Users
-	rebase = block group Read-only Users
-	removeReviewer = block group Read-only Users
-	submit = block group Read-only Users
-	submitAs = block group Read-only Users
 	viewDrafts = group user/Cloud Lab (cloudlab)
-	editTopicName = block group Read-only Users
-	editHashtags = block group Read-only Users
 	deleteDrafts = block group Read-only Users
 	publishDrafts = block group Read-only Users
-	createTag = block group Read-only Users
-	createSignedTag = block group Read-only Users
 	revert = group Registered Users
 [access "refs/heads/*"]
 	create = group Administrators
 	create = group Project Owners
 	forgeAuthor = group Administrators
-	forgeAuthor = group ONF Internal
 	forgeAuthor = group Project Owners
 	forgeCommitter = group Administrators
-	forgeCommitter = group ONF Internal
 	forgeCommitter = group Project Owners
-	push = deny group Administrators
 	label-Code-Review = -2..+2 group Administrators
-	label-Code-Review = -2..+2 group CORD Committers
 	label-Code-Review = -2..+2 group Project Owners
 	label-Code-Review = -1..+1 group Registered Users
 	submit = group Administrators
-	submit = group CORD Committers
 	submit = group Project Owners
-	pushMerge = deny group Administrators
 	label-Verified = -1..+1 group Administrators
-	label-Verified = -1..+1 group CORD Committers
 	label-Verified = -1..+1 group Non-Interactive Users
 	abandon = group CORD Committers
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	read = group Administrators
 	read = group Anonymous Users
-	read = group Project Owners
 	read = group Registered Users
 	push = group Administrators
 	label-Code-Review = -2..+2 group Administrators
-	label-Code-Review = -2..+2 group CORD Committers
 	label-Code-Review = -2..+2 group Project Owners
 	submit = group Administrators
-	submit = group CORD Committers
 	submit = group Project Owners
 	pushMerge = group Administrators
 	create = group Administrators
-	create = group CORD Committers
 	create = group Project Owners
 [access "refs/tags/*"]
 	createTag = group Administrators
@@ -118,6 +86,7 @@
 [access "refs/for/refs/meta/config"]
 	push = group Administrators
 [capability]
+	accessDatabase = group Administrators
 	accessDatabase = group user/Brian O'Connor (bocon)
 	accessDatabase = group user/Hung-Wei Chiu (hwchiu)
 	administrateServer = group Administrators