rethinking give rights

rights can be assigned to any entity with user or entu-api-key