diff --git a/project.config b/project.config
index a05ec3298..3ff478466 100644
--- a/project.config
+++ b/project.config
@@ -12,6 +12,7 @@
 	exclusiveGroupPermissions = submit
 [access "refs/tags/*"]
 	push = +force group flashrom developers
+	exclusiveGroupPermissions = push
 
 [label "Code-Review"]
 	function = MaxWithBlock
@@ -30,10 +31,10 @@
 	email = flashrom-gerrit@flashrom.org
 	header = to
 	filter = -is:draft
-[access "refs/heads/master"]
 [access "refs/*"]
 	label-Verified = -1..+1 group user/Stefan Tauner (stefanct)
 	submit = group user/Stefan Tauner (stefanct)
+	label-Code-Review = -2..+2 group user/Stefan Tauner (stefanct)
 [access "refs/heads/*"]
 	exclusiveGroupPermissions = create delete
 	create = group user/David Hendricks (dhendrix)