Fix rights on user management