fixed user rights