user access rights added.

two more left in objectmanager (list*/find*)