Restrict access to branch release-R117 to LTS Refresher group.

BUG=b/566213952

Change-Id: I8c8c45a5542bcdde6cea9570d1c980340e3c4df7
Reviewed-on: https://cos-review.googlesource.com/c/All-Projects/+/212386
Reviewed-by: Derek Taylor <ddtaylor@google.com>
Tested-by: He Gao <hegao@google.com>
Reviewed-by: Miri Amarilio <mirilio@google.com>
diff --git a/groups b/groups
index 77d819e..9effdc3 100644
--- a/groups
+++ b/groups
@@ -32,3 +32,4 @@
 mdb:kokoro                                                    	mdb/kokoro
 mdb:kokoro-dedicated                                          	mdb/kokoro-dedicated
 mdb:kokoro-gob-readers                                        	mdb/kokoro-gob-readers
+fdcdd5531e58d7932f1f80c3913995e8daf7bc6b                      	LTS Refresher
diff --git a/project.config b/project.config
index d9a6abf..8f4e10b 100644
--- a/project.config
+++ b/project.config
@@ -186,3 +186,19 @@
 [submit-requirement "Code-Review"]
 	submittableIf = label:Code-Review=MAX AND -label:Code-Review=MIN
 	canOverrideInChildProjects = true
+[access "refs/heads/release-R117"]
+	create = group LTS Refresher
+	create = block group Registered Users
+	createSignedTag = group LTS Refresher
+	createSignedTag = block group Registered Users
+	createTag = group LTS Refresher
+	createTag = block group Registered Users
+	delete = group LTS Refresher
+	delete = block group Registered Users
+	push = group LTS Refresher
+	push = block group Registered Users
+	pushMerge = group LTS Refresher
+	pushMerge = block group Registered Users
+	submit = group LTS Refresher
+	submit = block group Registered Users
+