Modify access rules
diff --git a/groups b/groups
index 36aef1b..4df920f 100644
--- a/groups
+++ b/groups
@@ -1,5 +1,6 @@
 # UUID                                  	Group Name
 #
+64f36e423f1c655f470e3ebe90381a82d074f5d7	External submitters
 global:Anonymous-Users                  	Anonymous Users
 global:Project-Owners                   	Project Owners
 global:Registered-Users                 	Registered Users
diff --git a/project.config b/project.config
index 4c4d76f..7ca6409 100644
--- a/project.config
+++ b/project.config
@@ -23,9 +23,11 @@
 	forgeCommitter = group mdb/boringssl-committers
 	push = group Project Owners
 	push = group mdb/boringssl-committers
+	label-Code-Review = -2..+2 group External submitters
 	label-Code-Review = -2..+2 group Project Owners
 	label-Code-Review = -2..+2 group mdb/boringssl-committers
 	label-Code-Review = -1..+1 group Registered Users
+	submit = group External submitters
 	submit = group Project Owners
 	submit = group mdb/boringssl-committers
 	editTopicName = +force group Project Owners