update access rights