First draft to implement role based rights (group based rights)