Add may-push groups

Change-Id: I2193529241dae0747db57b0709d6aa9e55a5f1d1
Reviewed-on: https://go-review.googlesource.com/c/All-Projects/+/263237
Reviewed-by: DO NOT USE <valsorda@google.com>
diff --git a/groups b/groups
index dfea063..257c6a4 100644
--- a/groups
+++ b/groups
@@ -7,6 +7,7 @@
 a68e77fe594e959daaacc2fb670298964f78acfa                      	approvers
 adf76ba6894d57eca12698844876eafed66f9990                      	gerritbot
 c7bf27e6d6fe0835046491033e39afd234b33db5                      	may-abandon-changes
+d6456e4d6da952f58af289d8a189acb7e451b298                      	may-push
 df7e96111acb673748b3161cac96c45ca77a5994                      	may-forge-author-identity
 global:Anonymous-Users                                        	Anonymous Users
 global:Registered-Users                                       	Registered Users
diff --git a/project.config b/project.config
index 0527b19..b89886e 100644
--- a/project.config
+++ b/project.config
@@ -16,10 +16,13 @@
 	push = group Registered Users
 	pushMerge = group Registered Users
 [access "refs/heads/*"]
+	create = group may-push
 	create = group release-managers
 	forgeAuthor = group gerritbot
 	forgeAuthor = group may-forge-author-identity
+	forgeAuthor = group may-push
 	forgeCommitter = group gerritbot
+	forgeCommitter = group may-push
 	label-Code-Review = -2..+2 group approvers
 	label-Trust = +0..+1 group approvers
 	label-Code-Review = -1..+1 group Registered Users
@@ -33,6 +36,7 @@
 	label-TryBot-Result = -1..+1 group gobot
 	removeReviewer = group approvers
 	abandon = group may-abandon-changes
+	push = group may-push
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = label-Code-Review push read submit
 	read = group mdb/golang-gob-eng-policy
@@ -41,10 +45,15 @@
 	label-Code-Review = -2..+2 group mdb/golang-gob-owners
 	submit = group mdb/golang-gob-owners
 [access "refs/tags/*"]
+	push = group may-push
 	push = group release-managers
+	create = group may-push
 	create = group release-managers
+	forgeAuthor = group may-push
 	forgeAuthor = group release-managers
+	forgeCommitter = group may-push
 	forgeCommitter = group release-managers
+	createTag = group may-push
 	createTag = group release-managers
 [label "Code-Review"]
 	function = MaxWithBlock