add rights and user