[feature] - rest api works asyncrhoniously for checking rights