split permissions to local and remote