implemented user-rights