determine_rights() now supports 'authority+sa' and 'authority+ma' types