move right service to own package
added logging and defaulting to no rights if rights can not be
determined