diff --git a/project.config b/project.config
index 216abf6..9306284 100644
--- a/project.config
+++ b/project.config
@@ -13,11 +13,6 @@
 [access "refs/*"]
 	read = group Administrators
 	read = group Anonymous Users
-[access "refs/for/refs/*"]
-	push = group Anonymous Users
-	push = group Registered Users
-	pushMerge = group Registered Users
-	submit = group Registered Users
 [access "refs/heads/*"]
 	create = group Administrators
 	create = group Project Owners
@@ -69,5 +64,10 @@
 	value =  0 No score
 	value = +1 Verified
 	defaultValue = 0
+[access "refs/for/*"]
+	push = group Anonymous Users
+	push = group Registered Users
+	pushMerge = group Registered Users
+	submit = group Registered Users
 [plugin "its-bugzilla"]
 	enabled = true