diff --git a/groups b/groups
new file mode 100644
index 0000000..596211b
--- /dev/null
+++ b/groups
@@ -0,0 +1,4 @@
+# UUID                 	Group Name
+#
+global:Anonymous-Users 	Anonymous Users
+global:Registered-Users	Registered Users
diff --git a/project.config b/project.config
index 563d43e..074c139 100644
--- a/project.config
+++ b/project.config
@@ -1,2 +1,5 @@
 [access]
 	inheritFrom = All-Projects
+[access "refs/*"]
+	read = group Anonymous Users
+	read = group Registered Users