diff --git a/project.config b/project.config
index 9139994..b7f34e5 100644
--- a/project.config
+++ b/project.config
@@ -83,6 +83,8 @@
 	administrateServer = group Administrators
 	createAccount = group mdb/gwsq
 	viewAllAccounts = group Registered Users
+[access "refs/for/refs/heads/master"]
+	exclusiveGroupPermissions = addPatchSet push
 [plugin "uploadvalidator"]
 	blockedKeywordPattern = testfishiamfake
 	blockedKeywordPattern = (?i)\\bairbrush\\b