Ah... figured it out myself.
--[cut]--
[access "refs/for/refs/heads/$BRANCHNAME"]
pushMerge = group $GROUP
[access "refs/heads/$BRANCHNAME"]
label-code-Review = -2..+2 group $GROUP
submit = group $GROUP
--[/cut]--
I was messing myself up by adding the /* at the end of refs!
-Andy-