only rights on master