diff --git a/modules/openstack_project/files/gerrit/acls/stackforge/anvil.config b/modules/openstack_project/files/gerrit/acls/stackforge/anvil.config
index 6b24145ddc..fe13c9732e 100644
--- a/modules/openstack_project/files/gerrit/acls/stackforge/anvil.config
+++ b/modules/openstack_project/files/gerrit/acls/stackforge/anvil.config
@@ -5,6 +5,11 @@
         label-Code-Review = -2..+2 group anvil-core
         label-Approved = +0..+1 group anvil-core
         workInProgress = group anvil-core
+[access "refs/heads/stable/*"]
+        exclusiveGroupPermissions = label-Code-Review label-Approved
+        label-Code-Review = -2..+2 group anvil-core
+        label-Code-Review = -1..+1 group Registered Users
+        label-Approved = +0..+1 group anvil-core
 [project]
         state = active
 [receive]