working on user rights