diff --git a/gerrit/acls/openstack/neutron-vpnaas.config b/gerrit/acls/openstack/neutron-vpnaas.config
index 477194a546..c9bd68ac2c 100644
--- a/gerrit/acls/openstack/neutron-vpnaas.config
+++ b/gerrit/acls/openstack/neutron-vpnaas.config
@@ -1,15 +1,24 @@
 [access "refs/for/refs/*"]
-pushMerge = group neutron-vpnaas-core
+pushMerge = group neutron-release
 
 [access "refs/heads/*"]
 abandon = group neutron-vpnaas-core
-create = group neutron-vpnaas-release
+create = group neutron-release
 label-Code-Review = -2..+2 group neutron-vpnaas-core
 label-Verified = -1..+1 group neutron-ci
 label-Workflow = -1..+1 group neutron-vpnaas-core
 
-[access "refs/tags/*"]
-pushSignedTag = group neutron-vpnaas-release
+[access "refs/heads/stable/*"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group neutron-stable-maint
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group neutron-stable-maint
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group neutron-stable-maint
 
 [receive]
 requireChangeId = true