diff --git a/project.config b/project.config
index 2239533..7b2b6dc 100644
--- a/project.config
+++ b/project.config
@@ -17,6 +17,28 @@
 	read = group Anonymous Users
 	read = group Non-Interactive Users
 	read = group Registered Users
+	abandon = block group Read-only Users
+	create = block group Read-only Users
+	forgeAuthor = block group Read-only Users
+	forgeCommitter = block group Read-only Users
+	forgeServerAsCommitter = block group Read-only Users
+	push = block group Read-only Users
+	pushMerge = block group Read-only Users
+	pushTag = block group Read-only Users
+	pushSignedTag = block group Read-only Users
+	label-Code-Review = group Read-only Users
+	label-Verified = group Read-only Users
+	labelAs-Code-Review = group Read-only Users
+	labelAs-Verified = group Read-only Users
+	rebase = block group Read-only Users
+	removeReviewer = block group Read-only Users
+	submit = block group Read-only Users
+	submitAs = group Read-only Users
+	viewDrafts = group Read-only Users
+	editTopicName = block group Read-only Users
+	editHashtags = block group Read-only Users
+	deleteDrafts = block group Read-only Users
+	publishDrafts = block group Read-only Users
 [access "refs/heads/*"]
 	create = group Administrators
 	create = group Project Owners