support for special vars [:username:] and [:groupname:] in path rights