A Precedent Approach to Assigning Access Rights