Modify access rules

groups

diff --git a/groups b/groups
index c0c882a..29367bf 100644
--- a/groups
+++ b/groups
@@ -1,5 +1,6 @@
 # UUID                                                        	Group Name
 #
+1e481e79a016babff336ee3bcfaa2acdb40c9da4                      	banned-users
 28af6c56d29f40fcca6fef99686e58212a7177bf                      	trybot-result-changers
 3d01bedfad4f1f421e4614b4e56d1cbb02d6d6cd                      	may-force-push
 420ead950461b5f205dd05e8a48e54ec518170b0                      	admins

project.config

diff --git a/project.config b/project.config
index 0f0c8f9..d6cb0f5 100644
--- a/project.config
+++ b/project.config
@@ -9,11 +9,14 @@
 	mergeContent = true
 	action = cherry pick
 [access "refs/*"]
+	read = deny group banned-users
 	read = group Anonymous Users
 	viewDrafts = group gobot
 [access "refs/for/refs/heads/*"]
 	push = group Registered Users
+	push = block group banned-users
 	pushMerge = group Registered Users
+	pushMerge = block group banned-users
 [access "refs/heads/*"]
 	create = group osp-team
 	create = group release-managers
@@ -25,6 +28,7 @@
 	push = +force group may-force-push
 	label-Code-Review = -2..+2 group approvers
 	label-Code-Review = -1..+1 group Registered Users
+	label-Code-Review = block group banned-users
 	submit = group approvers
 	editTopicName = group approvers
 	label-Run-TryBot = +0..+1 group approvers