added user access rights