added full user rights management