fixing checking against wrong rights - or wrong way