add access rights definitions