command: npm access rights