Rights, roles, and user types