Store update rights as session variable