fixed share CRUD rights