project.config: enable non-AoD, code-reviewed changes to refs/meta/config

Change-Id: Ie3d53ecda5d66debaa97f1867c963309c5b78d0f

project.config

diff --git a/project.config b/project.config
index 9c0e7b5..7b02c8b 100644
--- a/project.config
+++ b/project.config
@@ -13,6 +13,9 @@
 	viewDrafts = group gobot
 	removeReviewer = group mdb/gwsq
 	revert = group Registered Users
+[access "refs/for/*"]
+	addPatchSet = group may-forge-author-identity
+	exclusiveGroupPermissions = addPatchSet
 [access "refs/for/refs/heads/*"]
 	push = group Registered Users
 	pushMerge = group Registered Users
@@ -40,14 +43,20 @@
 	removeReviewer = group approvers
 	abandon = group may-abandon-changes
 	push = group may-push
+[access "refs/for/refs/meta/config"]
+	push = group mdb/gerritcodereview-eng
+	push = group mdb/golang-gob-eng-policy
+	pushMerge = group mdb/golang-gob-eng-policy
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = label-Code-Review push read submit
 	read = group mdb/gerritcodereview-eng
 	read = group mdb/golang-gob-eng-policy
-	read = group mdb/golang-gob-owners
+	label-Code-Review = +0..+2 group mdb/golang-gob-eng-policy
+	label-Hold = +0..+1 group mdb/golang-gob-eng-policy
+	submit = group mdb/golang-gob-eng-policy
+	removeReviewer = group mdb/golang-gob-eng-policy
+	abandon = group mdb/golang-gob-eng-policy
 	push = group mdb/golang-gob-owners
-	label-Code-Review = +0..+2 group mdb/golang-gob-owners
-	submit = group mdb/golang-gob-owners
 [access "refs/tags/*"]
 	push = group may-push
 	push = group release-managers
@@ -61,6 +70,14 @@
 	createTag = group gobot
 	createTag = group may-push
 	createTag = group release-managers
+[access "^refs/heads/(release|internal)-branch.+"]
+	exclusiveGroupPermissions = submit
+	submit = group release-managers
+	label-Auto-Submit = block +0..+1 group release-managers
+[access "^refs/heads/release-branch(.+)-security$"]
+	forgeAuthor = group release-managers
+	forgeCommitter = group release-managers
+	push = +force group release-managers
 [label "Code-Review"]
 	function = NoOp
 	defaultValue = 0
@@ -93,23 +110,9 @@
 	value = 0 Do not automatically submit change
 	value = +1 Automatically submit change
 	copyCondition = changekind:NO_CHANGE
-[access "refs/for/*"]
-	addPatchSet = group may-forge-author-identity
-	exclusiveGroupPermissions = addPatchSet
 [commitmessage]
 	maxSubjectLength = 1000
 	maxLineLength = 1000
-[access "^refs/heads/(release|internal)-branch.+"]
-	exclusiveGroupPermissions = submit
-	submit = group release-managers
-	label-Auto-Submit = block +0..+1 group release-managers
-[access "^refs/heads/release-branch(.+)-security$"]
-	forgeAuthor = group release-managers
-	forgeCommitter = group release-managers
-	push = +force group release-managers
-[access "refs/for/refs/meta/config"]
-	push = group mdb/gerritcodereview-eng
-	push = group mdb/golang-gob-eng-policy
 [accounts]
 	sameGroupVisibility = deny group google/google-union:signcla
 [contributor-agreement "Google CLA"]