Modify access rules

project.config

diff --git a/project.config b/project.config
index 39b4ce5..1db6edd 100644
--- a/project.config
+++ b/project.config
@@ -5,20 +5,9 @@
 	requireSignedOffBy = false
 	requireChangeId = true
 	enableSignedPush = false
-[accounts]
-	sameGroupVisibility = deny group google/google-union:signcla
-[contributor-agreement "Google CLA"]
-	description = Google Contributor License Agreement
-	agreementUrl = static/cla.html
-	accepted = group google/google-union:signcla
 [submit]
 	mergeContent = false
 	action = rebase if necessary
-[capability]
-	administrateServer = group mdb/hafnium-admin
-	createAccount = group mdb/gwsq
-	viewAllAccounts = group Anonymous Users
-	viewAllAccounts = group mdb/gwsq
 [access "refs/*"]
 	read = group Anonymous Users
 	read = group Registered Users
@@ -41,7 +30,7 @@
 	label-Code-Review = -2..+2 group Project Owners
 	label-Code-Review = -2..+2 group mdb/hafnium-access
 	label-Code-Review = -1..+1 group Registered Users
-	push = group Project Owners
+	push = +force group Project Owners
 	push = group mdb/hafnium-admin
 	submit = group Project Owners
 	submit = group mdb/hafnium-access
@@ -77,3 +66,14 @@
 [access "refs/for/refs/heads/*"]
 	push = group Registered Users
 	pushMerge = group mdb/hafnium-access
+[accounts]
+	sameGroupVisibility = deny group google/google-union:signcla
+[contributor-agreement "Google CLA"]
+	description = Google Contributor License Agreement
+	agreementUrl = static/cla.html
+	accepted = group google/google-union:signcla
+[capability]
+	administrateServer = group mdb/hafnium-admin
+	createAccount = group mdb/gwsq
+	viewAllAccounts = group Anonymous Users
+	viewAllAccounts = group mdb/gwsq