update user and rights

update user and rights