determine user rights reqires the hrn of the caller instead of a cred (which may...