API send a user rights object to each module along with a database