After checking that no new rights are being added, actually set the rights, which may be a subset of the original rights.