user right and login