diff --git a/project.config b/project.config
index 305e235..0b407c2 100644
--- a/project.config
+++ b/project.config
@@ -32,8 +32,6 @@
 	push = group user/Ali Al-Shabibi (ash)
 	push = block group Read-only Users
 	pushMerge = block group Read-only Users
-	pushTag = block group Read-only Users
-	pushSignedTag = block group Read-only Users
 	label-Code-Review = group Read-only Users
 	label-Verified = group Read-only Users
 	labelAs-Code-Review = group Read-only Users
@@ -47,6 +45,8 @@
 	editHashtags = block group Read-only Users
 	deleteDrafts = block group Read-only Users
 	publishDrafts = block group Read-only Users
+	createTag = block group Read-only Users
+	createSignedTag = block group Read-only Users
 [access "refs/heads/*"]
 	create = group Administrators
 	create = group Project Owners
@@ -80,12 +80,12 @@
 	submit = group Project Owners
 	pushMerge = group Administrators
 [access "refs/tags/*"]
-	pushTag = group Administrators
-	pushTag = group Non-Interactive Users
-	pushTag = group Project Owners
-	pushSignedTag = group Administrators
-	pushSignedTag = group Non-Interactive Users
-	pushSignedTag = group Project Owners
+	createTag = group Administrators
+	createTag = group Non-Interactive Users
+	createTag = group Project Owners
+	createSignedTag = group Administrators
+	createSignedTag = group Non-Interactive Users
+	createSignedTag = group Project Owners
 [label "Code-Review"]
 	function = MaxWithBlock
 	defaultValue = 0
@@ -116,5 +116,7 @@
        agreementUrl = static/cla.html
        autoVerify = group ONF CLA Accepted
        accepted = group ONF CLA Accepted
+[access "refs/for/*"]
+	addPatchSet = group Registered Users
 [plugin "reviewers-by-blame"]
 	maxReviewers = 3