diff --git a/acls/default.config b/acls/default.config
index a1bacf1..01fded3 100644
--- a/acls/default.config
+++ b/acls/default.config
@@ -1,4 +1,7 @@
 [project]
     description = "Infra sandbox"
+[access "refs/*"]
+    read = group Anonymous Users
+    read = group Non-Interactive Users
 [access]
     inheritFrom = All-Projects
diff --git a/projects.yaml b/projects.yaml
index e19b680..122e2e9 100644
--- a/projects.yaml
+++ b/projects.yaml
@@ -1,17 +1,17 @@
 -
   project: infra/gerrit-projects
   description: Gerrit projects configuration
-  upstream: ssh://sandbox-ci@gerrit.mcp.mirantis.com:29418/infra/sandbox/jeepyb"
+  upstream: ssh://sandbox-ci@gerrit.mcp.mirantis.com:29418/infra/sandbox/jeepyb
   acl-config: acls/default.config
 -
   project: infra/jenkins-config
   description: Jenkins configuration
-  upstream: ssh://sandbox-ci@gerrit.mcp.mirantis.com:29418/infra/sandbox/jcasc"
+  upstream: ssh://sandbox-ci@gerrit.mcp.mirantis.com:29418/infra/sandbox/jcasc
   acl-config: acls/default.config
 
 -
   project: infra/jenkins-jobs
   description: Jenkins jobs configuration
-  upsteram: ssh://sandbox-ci@gerrit.mcp.mirantis.com:29418/infra/sandbox/jjb"
+  upsteram: ssh://sandbox-ci@gerrit.mcp.mirantis.com:29418/infra/sandbox/jjb
   acl-config: acls/default.config