Here you can define, who has which rule in your project/system. Who is a friend, a member or staff. You can define the possiblitites of the rules in the object-access-area. Access rights can be defined for project, threads or objects. Access will be recursive.
There are rules for users. You can define, what every rule can do by editing the access. Access can be [read],[comment&read],[write&comment&read]. Access is defined over OBJECT > EDIT > ACCESS. [EDIT ACCESS] If you you wanna understand and anaylse it deeply: [ACCESS ANALYSIS]
RULES + ACESS RIGHTS
Here you can add, remove, request for rules in a team.