COOK-2210 New way to manage user rights

Depends on COOK-2211 (and is based on COOK-2180)