fix view in site-plugin and rights in plugin

store the rights now in user, so we could call it into a plugin.
use this in site-plugin for the view.