add user right validation