permissions for replication