[FIX] access right for portal user