document new code
allow to set global rights (for all users not in commands_rights) using '*' as the username
fix bug where removed permissions completely forbid to use the command
document rights management