use private method to check rights level