User rights vs examination security