Flexible setting of access rights