Modify access rules
diff --git a/groups b/groups
index 1800006..f307770 100644
--- a/groups
+++ b/groups
@@ -2,6 +2,7 @@
#
4f32b523380e68c8595bdf27a006c697ea17bade Non-Interactive Users
61317511a4a11254cbbf9612896412663548965a Administrators
+63e77955f1e6a49cb3169e4d3ec0a9fd30380c11 Read-only Users
7177c81018e69d9a1b1f6f940aad91fbbba574d1 CORD Committers
global:Anonymous-Users Anonymous Users
global:Project-Owners Project Owners
diff --git a/project.config b/project.config
index 2239533..7b2b6dc 100644
--- a/project.config
+++ b/project.config
@@ -17,6 +17,28 @@
read = group Anonymous Users
read = group Non-Interactive Users
read = group Registered Users
+ abandon = block group Read-only Users
+ create = block group Read-only Users
+ forgeAuthor = block group Read-only Users
+ forgeCommitter = block group Read-only Users
+ forgeServerAsCommitter = block group Read-only Users
+ push = block group Read-only Users
+ pushMerge = block group Read-only Users
+ pushTag = block group Read-only Users
+ pushSignedTag = block group Read-only Users
+ label-Code-Review = group Read-only Users
+ label-Verified = group Read-only Users
+ labelAs-Code-Review = group Read-only Users
+ labelAs-Verified = group Read-only Users
+ rebase = block group Read-only Users
+ removeReviewer = block group Read-only Users
+ submit = block group Read-only Users
+ submitAs = group Read-only Users
+ viewDrafts = group Read-only Users
+ editTopicName = block group Read-only Users
+ editHashtags = block group Read-only Users
+ deleteDrafts = block group Read-only Users
+ publishDrafts = block group Read-only Users
[access "refs/heads/*"]
create = group Administrators
create = group Project Owners