Method and device for authorizing content operations

Methods of and devices (D 1 ) for authorizing an operation requested by a first user (P 2 ) on a content item (C 1 ) in accordance with a user right (UR 1 ). The user right may identify the first user or a second user (P) and authorizes the user in question to perform the requested operation on the content item. If the user right identifies the second user, the operation is authorized upon receipt of information linking a user right of the first user and the user right of the second user. Preferably the information comprises one or more domain certificates (DC 1 , DC 2 ) identifying the first and second users as members of the same authorized domain (AD). Preferably a content right (CR 1 ) enabling the operation is used, whereby the user right authorizes the second user to employ the content right.