ipmanager & ipmrightsmgmt: implement rights per subnet