add simple verify for user rights on server side