Scope replication-failure read-only to repo/project, not the whole server

Scope replication-failure read-only to repo/project, not the whole server #2514