RightService with restriction on user id