Hi Mohamed,

It's not easy because access rights are stored as a bit mask. For example, this will tell you who has (Manage Trustees and Trustee Privileges) or Scan rights:

select	trustee_id, t.sid, trustee_name, isuser, descrip, trustee_flags,last_active, a.privs
from	trustee as t
inner	join [account_security] as a
		on a.sid=t.sid
where  (a.privs & 4097>0) or (a.uif & 1>0)

Privileges (privs): 4097 = 0001 0000 0000 0001

Rights (uif): 1 = 0000 0000 0000 0001

With some trail and error, you could work out how to determine a user's complete set of rights.

-Ben