Modify access rules
diff --git a/groups b/groups
index 02e3e53..de72d7b 100644
--- a/groups
+++ b/groups
@@ -2,7 +2,7 @@
 #
 3637d7139a2773f709f3dbf1302b765d9e62a09a	Non-Interactive Users
 a44845d0e803348ac688e6f8e2205ddad6ede77f	Administrators
+e577597a0eac952a4abc7e6d25a08df24bd111dd	CLA Accepted - Individual
 global:Anonymous-Users                  	Anonymous Users
 global:Project-Owners                   	Project Owners
 global:Registered-Users                 	Registered Users
-e577597a0eac952a4abc7e6d25a08df24bd111dd	CLA Accepted - Individual
diff --git a/project.config b/project.config
index a3664b0..e6f12ed 100644
--- a/project.config
+++ b/project.config
@@ -7,16 +7,13 @@
 	enableSignedPush = false
 [submit]
 	mergeContent = true
-[capability]
-	administrateServer = group Administrators
-	priority = batch group Non-Interactive Users
-	streamEvents = group Non-Interactive Users
 [access "refs/*"]
 	read = group Administrators
 	read = group Anonymous Users
 	revert = group Registered Users
 [access "refs/for/*"]
 	addPatchSet = group Registered Users
+	submit = group Administrators
 [access "refs/for/refs/*"]
 	push = group Registered Users
 	pushMerge = group Registered Users
@@ -65,7 +62,11 @@
 	value = +1 Looks good to me, but someone else must approve
 	value = +2 Looks good to me, approved
 [contributor-agreement "Individual"]
-  description = If you are going to be contributing code on your own, this is the one you want. You can sign this one online.
-  agreementUrl = static/cla_individual.html
-  autoVerify = group CLA Accepted - Individual
-  accepted = group CLA Accepted - Individual
+	description = If you are going to be contributing code on your own, this is the one you want. You can sign this one online.
+	agreementUrl = static/cla_individual.html
+	autoVerify = group CLA Accepted - Individual
+	accepted = group CLA Accepted - Individual
+[capability]
+	administrateServer = group Administrators
+	priority = batch group Non-Interactive Users
+	streamEvents = group Non-Interactive Users