rework user rights