diff --git a/gerrit/acls/stackforge/puppet-tripleo.config b/gerrit/acls/stackforge/puppet-tripleo.config
new file mode 100644
index 0000000000..0d4000f606
--- /dev/null
+++ b/gerrit/acls/stackforge/puppet-tripleo.config
@@ -0,0 +1,30 @@
+[access "refs/heads/*"]
+abandon = group puppet-manager-core
+abandon = group tripleo-core
+create = group puppet-manager-core
+create = group tripleo-core
+label-Code-Review = -2..+2 group puppet-manager-core
+label-Code-Review = -2..+2 group tripleo-core
+label-Workflow = -1..+1 group puppet-manager-core
+label-Workflow = -1..+1 group tripleo-core
+
+[access "refs/heads/stable/*"]
+abandon = group puppet-manager-core
+abandon = group tripleo-core
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group puppet-manager-core
+label-Code-Review = -2..+2 group tripleo-core
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+1 group puppet-manager-core
+label-Workflow = -1..+1 group tripleo-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-manager-core
+pushSignedTag = group tripleo-core
+
+[receive]
+requireChangeId = true
+requireContributorAgreement = true
+
+[submit]
+mergeContent = true
diff --git a/gerrit/projects.yaml b/gerrit/projects.yaml
index 773d6f1cc9..41b620da4e 100755
--- a/gerrit/projects.yaml
+++ b/gerrit/projects.yaml
@@ -2091,7 +2091,7 @@
   acl-config: /home/gerrit2/acls/stackforge/puppet-modules.config
 - project: stackforge/puppet-tripleo
   description: Lightweight composition layer for Puppet TripleO
-  acl-config: /home/gerrit2/acls/stackforge/puppet-modules.config
+  acl-config: /home/gerrit2/acls/stackforge/puppet-tripleo.config
 - project: stackforge/puppet-trove
   description: OpenStack Trove Puppet Module
   acl-config: /home/gerrit2/acls/stackforge/puppet-modules.config