A right owner can get the following rights to an entity instance:

• SEE - he can see the object and recognize that it exists,
• PRV - he can see a reduced view,
• RD - he can see all contents of the object,
• USE - he can use the entity, e.g. to merge it into his own web page,
• WR - he can change contents of the object,
• EXE - in the case of an applications object he can execute the application,
• DEL - he can delete the object
• ADM - he has more extensive administrative rights for this entity

For the right determination the following rules are valid:

• a user, who has administrative rights for an object, can assign to arbitrary other users, user groups and role owners rights,
• a user can be in as many as desired groups member and have as many as desired roles,
• if a user logs in his login, all his groups and all his roles are used for the further right evaluation,
• which of the 8 possible rights a user to an object has, is determined by adding all the rights for which the entiy determines relevant right instances, which the user has,
• each user (also not registered) belongs automatically to the group „World “,
• each registered user belongs to the group „Registered“ automatically.