change user_page to access_rights, added assign access_rights