users' rights implemented for two groups: MBI and USER