diff --git a/project.config b/project.config
index da1ed2b74..b9222039f 100644
--- a/project.config
+++ b/project.config
@@ -63,6 +63,8 @@
 	exclusiveGroupPermissions = push
 [project]
 	description = A utility for identifying, reading, writing, verifying and erasing flash chips
+[access "refs/heads/master"]
+	push = deny group flashrom developers
 [notify "flashrom-gerrit"]
 	header = to
 	email = flashrom-gerrit@flashrom.org