fix user rights mgmt