catch up the change to determine_user_rights