diff --git a/modules/openstack_project/files/gerrit/acls/stackforge/puppet-modules.config b/modules/openstack_project/files/gerrit/acls/stackforge/puppet-modules.config
index bb421c1437..23af3e2a21 100644
--- a/modules/openstack_project/files/gerrit/acls/stackforge/puppet-modules.config
+++ b/modules/openstack_project/files/gerrit/acls/stackforge/puppet-modules.config
@@ -5,6 +5,11 @@
         label-Code-Review = -2..+2 group puppet-manager-core
         label-Approved = +0..+1 group puppet-manager-core
         workInProgress = group puppet-manager-core
+[access "refs/heads/stable/*"]
+        exclusiveGroupPermissions = label-Code-Review label-Approved
+        label-Code-Review = -2..+2 group puppet-manager-core
+        label-Code-Review = -1..+1 group Registered Users
+        label-Approved = +0..+1 group puppet-manager-core
 [access "refs/tags/*"]
         pushTag = group puppet-manager-core
 [project]