Assign default add patch set permission on refs/for/*

By default each user should be able to add patch sets on all open changes.
We have created a new permission to lock changes, such that only
the change owner or a specific group can add new patchsets to exisitng
changes.

groups

diff --git a/groups b/groups
index 007acf5..375a691 100644
--- a/groups
+++ b/groups
@@ -1,10 +1,10 @@
-# UUID                                  	Group Name
+# UUID                                                        	Group Name
 #
-global:Anonymous-Users                  	Anonymous Users
-global:Project-Owners                   	Project Owners
-global:Registered-Users                 	Registered Users
-mdb:opensource-outreach-eng-dev         	mdb/opensource-outreach-eng-dev
-mdb:gerritcodereview-admin              	mdb/gerritcodereview-admin
+global:Anonymous-Users                                        	Anonymous Users
+global:Project-Owners                                         	Project Owners
+global:Registered-Users                                       	Registered Users
 google:AI2Pq9r_ksT_hfUOny8swsG8krQwPL5eOM0hGHf4QWGOPdy9igqsdhs	google/google-union:signcla
-ldap:employees                          	ldap/employees
-ldap:interns                            	ldap/interns
+ldap:employees                                                	ldap/employees
+ldap:interns                                                  	ldap/interns
+mdb:gerritcodereview-admin                                    	mdb/gerritcodereview-admin
+mdb:opensource-outreach-eng-dev                               	mdb/opensource-outreach-eng-dev

project.config

diff --git a/project.config b/project.config
index 3eea195..5652850 100644
--- a/project.config
+++ b/project.config
@@ -42,8 +42,8 @@
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	read = group Project Owners
-	read = group mdb/opensource-outreach-eng-dev
 	read = group mdb/gerritcodereview-admin
+	read = group mdb/opensource-outreach-eng-dev
 	push = group Project Owners
 	push = group mdb/opensource-outreach-eng-dev
 	label-Code-Review = -2..+2 group Project Owners
@@ -64,5 +64,7 @@
 	value =  0 No score
 	value = +1 Looks good to me, but someone else must approve
 	value = +2 Looks good to me, approved
-	copyAllScoresOnTrivialRebase = true 
-	copyAllScoresIfNoCodeChange = true 
+	copyAllScoresOnTrivialRebase = true
+	copyAllScoresIfNoCodeChange = true
+[access "refs/for/*"]
+	addPatchSet = group Registered Users