#660 SRO access rights