fix rights bug in invoice & resource