diff --git a/db_scripts/diff/15002.down b/db_scripts/diff/15002.down
new file mode 100644
index 00000000..03330a3a
--- /dev/null
+++ b/db_scripts/diff/15002.down
@@ -0,0 +1,3 @@
+USE provisioning;
+REVOKE SELECT ON provisioning.voip_rewrite_rule_sets FROM prosody@localhost;
+REVOKE SELECT ON provisioning.voip_rewrite_rules FROM prosody@localhost;
diff --git a/db_scripts/diff/15002_not_replicated.up b/db_scripts/diff/15002_not_replicated.up
new file mode 100644
index 00000000..8b2968b8
--- /dev/null
+++ b/db_scripts/diff/15002_not_replicated.up
@@ -0,0 +1,4 @@
+-- don't replicate this up script to not break 2.8->3.0 upgrade
+USE provisioning;
+GRANT SELECT ON provisioning.voip_rewrite_rule_sets TO prosody@localhost;
+GRANT SELECT ON provisioning.voip_rewrite_rules TO prosody@localhost;