checking user rights for moves and tomatoes