fix: get user rights when role is null