rights: WIP
rights: read only permission
rights: update permission
suppress rights app