diff --git a/groups b/groups
new file mode 100644
index 0000000..596211b
--- /dev/null
+++ b/groups
@@ -0,0 +1,4 @@
+# UUID                 	Group Name
+#
+global:Anonymous-Users 	Anonymous Users
+global:Registered-Users	Registered Users
diff --git a/project.config b/project.config
index a782fca..acabf54 100644
--- a/project.config
+++ b/project.config
@@ -2,3 +2,6 @@
 	inheritFrom = All-Projects
 [submit]
 	action = inherit
+[access "refs/*"]
+	read = group Anonymous Users
+	read = group Registered Users