diff --git a/gerrit/acls/openstack/astara.config b/gerrit/acls/openstack/astara.config
index 947bf38b96..c614175224 100644
--- a/gerrit/acls/openstack/astara.config
+++ b/gerrit/acls/openstack/astara.config
@@ -4,6 +4,18 @@ create = group astara-release
 label-Code-Review = -2..+2 group astara-core
 label-Workflow = -1..+1 group astara-core
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group astara-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group astara-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group astara-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/barbican.config b/gerrit/acls/openstack/barbican.config
index 37d61e581a..9e396ba49b 100644
--- a/gerrit/acls/openstack/barbican.config
+++ b/gerrit/acls/openstack/barbican.config
@@ -15,6 +15,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group barbican-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group barbican-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group barbican-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group barbican-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/cinder.config b/gerrit/acls/openstack/cinder.config
index 664a619a62..37a6f9a811 100644
--- a/gerrit/acls/openstack/cinder.config
+++ b/gerrit/acls/openstack/cinder.config
@@ -16,6 +16,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group cinder-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group cinder-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group cinder-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group cinder-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/congress.config b/gerrit/acls/openstack/congress.config
index bdc15fe6bd..9fe7872cf9 100644
--- a/gerrit/acls/openstack/congress.config
+++ b/gerrit/acls/openstack/congress.config
@@ -17,6 +17,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group congress-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group congress-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group congress-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group congress-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/designate-dashboard.config b/gerrit/acls/openstack/designate-dashboard.config
index 3d684b0a84..63ebda7763 100644
--- a/gerrit/acls/openstack/designate-dashboard.config
+++ b/gerrit/acls/openstack/designate-dashboard.config
@@ -13,6 +13,18 @@ label-Code-Review = -2..+2 group horizon-core
 label-Workflow = -1..+1 group designate-milestone
 label-Workflow = -1..+1 group horizon-core
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group designate-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group designate-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group designate-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/designate.config b/gerrit/acls/openstack/designate.config
index a77d2e1855..84e8c6a0d0 100644
--- a/gerrit/acls/openstack/designate.config
+++ b/gerrit/acls/openstack/designate.config
@@ -16,6 +16,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group designate-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group designate-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group designate-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group designate-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/freezer.config b/gerrit/acls/openstack/freezer.config
index e0fe06b2e7..f28e108b48 100644
--- a/gerrit/acls/openstack/freezer.config
+++ b/gerrit/acls/openstack/freezer.config
@@ -16,6 +16,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group freezer-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group freezer-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group freezer-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group freezer-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/glance.config b/gerrit/acls/openstack/glance.config
index 5019e3b74b..15009e21a8 100644
--- a/gerrit/acls/openstack/glance.config
+++ b/gerrit/acls/openstack/glance.config
@@ -17,6 +17,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group glance-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group glance-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group glance-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group glance-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/heat.config b/gerrit/acls/openstack/heat.config
index 00d846f1b0..874cdb97d4 100644
--- a/gerrit/acls/openstack/heat.config
+++ b/gerrit/acls/openstack/heat.config
@@ -15,6 +15,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group heat-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group heat-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group heat-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group heat-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/horizon.config b/gerrit/acls/openstack/horizon.config
index b3726ed973..b6b508f5f6 100644
--- a/gerrit/acls/openstack/horizon.config
+++ b/gerrit/acls/openstack/horizon.config
@@ -16,6 +16,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group horizon-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group horizon-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group horizon-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group horizon-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/keystone.config b/gerrit/acls/openstack/keystone.config
index a23bb72ceb..845d9733d6 100644
--- a/gerrit/acls/openstack/keystone.config
+++ b/gerrit/acls/openstack/keystone.config
@@ -18,6 +18,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group keystone-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group keystone-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group keystone-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group keystone-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/manila.config b/gerrit/acls/openstack/manila.config
index f25c4e7d2b..3109d112d6 100644
--- a/gerrit/acls/openstack/manila.config
+++ b/gerrit/acls/openstack/manila.config
@@ -16,6 +16,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group manila-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group manila-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group manila-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group manila-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/mistral.config b/gerrit/acls/openstack/mistral.config
index cf427c54f3..e92b7013ee 100644
--- a/gerrit/acls/openstack/mistral.config
+++ b/gerrit/acls/openstack/mistral.config
@@ -16,6 +16,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group mistral-milestone
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group mistral-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group mistral-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group mistral-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/murano.config b/gerrit/acls/openstack/murano.config
index 9e5438ce14..5531652f7c 100644
--- a/gerrit/acls/openstack/murano.config
+++ b/gerrit/acls/openstack/murano.config
@@ -29,6 +29,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group murano-milestone
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group murano-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group murano-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group murano-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/networking-ovn.config b/gerrit/acls/openstack/networking-ovn.config
index 0d6c02db48..ae603dcb25 100644
--- a/gerrit/acls/openstack/networking-ovn.config
+++ b/gerrit/acls/openstack/networking-ovn.config
@@ -19,6 +19,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group neutron-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group neutron-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group neutron-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/neutron-dynamic-routing.config b/gerrit/acls/openstack/neutron-dynamic-routing.config
index 970b5bd8b4..8a140dfcfd 100644
--- a/gerrit/acls/openstack/neutron-dynamic-routing.config
+++ b/gerrit/acls/openstack/neutron-dynamic-routing.config
@@ -19,6 +19,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group neutron-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group neutron-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group neutron-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/neutron-fwaas.config b/gerrit/acls/openstack/neutron-fwaas.config
index 8957532e8d..0a7df69c65 100644
--- a/gerrit/acls/openstack/neutron-fwaas.config
+++ b/gerrit/acls/openstack/neutron-fwaas.config
@@ -19,6 +19,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group neutron-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group neutron-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group neutron-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/neutron-lbaas.config b/gerrit/acls/openstack/neutron-lbaas.config
index 6e26f685b9..7d66471db1 100644
--- a/gerrit/acls/openstack/neutron-lbaas.config
+++ b/gerrit/acls/openstack/neutron-lbaas.config
@@ -19,6 +19,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group neutron-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group neutron-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group neutron-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/neutron-vpnaas.config b/gerrit/acls/openstack/neutron-vpnaas.config
index fa4a35eb38..c60d4721b4 100644
--- a/gerrit/acls/openstack/neutron-vpnaas.config
+++ b/gerrit/acls/openstack/neutron-vpnaas.config
@@ -19,6 +19,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group neutron-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group neutron-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group neutron-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/neutron.config b/gerrit/acls/openstack/neutron.config
index b4283447c5..2436348a98 100644
--- a/gerrit/acls/openstack/neutron.config
+++ b/gerrit/acls/openstack/neutron.config
@@ -19,6 +19,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group neutron-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group neutron-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group neutron-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group neutron-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/nova.config b/gerrit/acls/openstack/nova.config
index d5736cabec..a1b844a685 100644
--- a/gerrit/acls/openstack/nova.config
+++ b/gerrit/acls/openstack/nova.config
@@ -16,6 +16,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group nova-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group nova-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group nova-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group nova-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/sahara-dashboard.config b/gerrit/acls/openstack/sahara-dashboard.config
index 8e0a7118ac..4a186eb9c2 100644
--- a/gerrit/acls/openstack/sahara-dashboard.config
+++ b/gerrit/acls/openstack/sahara-dashboard.config
@@ -16,6 +16,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group sahara-dashboard-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group sahara-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group sahara-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group sahara-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/sahara-etc.config b/gerrit/acls/openstack/sahara-etc.config
index 5d1596469a..180704a23e 100644
--- a/gerrit/acls/openstack/sahara-etc.config
+++ b/gerrit/acls/openstack/sahara-etc.config
@@ -17,6 +17,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group sahara-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group sahara-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group sahara-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group sahara-release-branch
+
 [access "refs/tags/*"]
 pushSignedTag = group sahara-release
 
diff --git a/gerrit/acls/openstack/sahara.config b/gerrit/acls/openstack/sahara.config
index 6fc8b0a385..fc79cd854a 100644
--- a/gerrit/acls/openstack/sahara.config
+++ b/gerrit/acls/openstack/sahara.config
@@ -16,6 +16,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group sahara-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group sahara-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group sahara-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group sahara-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/searchlight-ui.config b/gerrit/acls/openstack/searchlight-ui.config
index 4855f0230d..157e39c5af 100644
--- a/gerrit/acls/openstack/searchlight-ui.config
+++ b/gerrit/acls/openstack/searchlight-ui.config
@@ -6,6 +6,18 @@ label-Code-Review = -2..+2 group searchlight-core
 label-Workflow = -1..+1 group horizon-core
 label-Workflow = -1..+1 group searchlight-core
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group searchlight-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group searchlight-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group searchlight-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/searchlight.config b/gerrit/acls/openstack/searchlight.config
index 7cfa30d2aa..38a553e6d9 100644
--- a/gerrit/acls/openstack/searchlight.config
+++ b/gerrit/acls/openstack/searchlight.config
@@ -4,6 +4,18 @@ create = group searchlight-release
 label-Code-Review = -2..+2 group searchlight-core
 label-Workflow = -1..+1 group searchlight-core
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group searchlight-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group searchlight-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group searchlight-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/senlin.config b/gerrit/acls/openstack/senlin.config
index 52eba5ce01..ae9ed0d519 100644
--- a/gerrit/acls/openstack/senlin.config
+++ b/gerrit/acls/openstack/senlin.config
@@ -15,6 +15,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group senlin-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group senlin-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group senlin-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group senlin-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/trove-dashboard.config b/gerrit/acls/openstack/trove-dashboard.config
index 0655bc7188..252ea3e1b7 100644
--- a/gerrit/acls/openstack/trove-dashboard.config
+++ b/gerrit/acls/openstack/trove-dashboard.config
@@ -20,6 +20,18 @@ label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group horizon-stable-maint
 label-Workflow = -1..+1 group trove-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group trove-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group trove-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group trove-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/trove.config b/gerrit/acls/openstack/trove.config
index 0842ff7e37..c29f856b98 100644
--- a/gerrit/acls/openstack/trove.config
+++ b/gerrit/acls/openstack/trove.config
@@ -16,6 +16,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group trove-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group trove-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group trove-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group trove-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/zaqar-ui.config b/gerrit/acls/openstack/zaqar-ui.config
index f985a04d3c..4e508560c5 100644
--- a/gerrit/acls/openstack/zaqar-ui.config
+++ b/gerrit/acls/openstack/zaqar-ui.config
@@ -4,6 +4,18 @@ create = group zaqar-milestone
 label-Code-Review = -2..+2 group zaqar-ui-core
 label-Workflow = -1..+1 group zaqar-ui-core
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group zaqar-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group zaqar-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group zaqar-release-branch
+
 [access "refs/tags/*"]
 pushSignedTag = group zaqar-milestone
 
diff --git a/gerrit/acls/openstack/zaqar.config b/gerrit/acls/openstack/zaqar.config
index 9005c27e58..fe4f047c7e 100644
--- a/gerrit/acls/openstack/zaqar.config
+++ b/gerrit/acls/openstack/zaqar.config
@@ -15,6 +15,18 @@ label-Workflow = -1..+0 group Change Owner
 label-Workflow = -1..+1 group Project Bootstrappers
 label-Workflow = -1..+1 group zaqar-stable-maint
 
+[access "refs/heads/stable/newton"]
+abandon = group Change Owner
+abandon = group Project Bootstrappers
+abandon = group zaqar-release-branch
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group Project Bootstrappers
+label-Code-Review = -2..+2 group zaqar-release-branch
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+0 group Change Owner
+label-Workflow = -1..+1 group Project Bootstrappers
+label-Workflow = -1..+1 group zaqar-release-branch
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true