OSCIN03Legitimacy is a key part of the social requirements specification for a trusted virtual community environment (VCE). If an environment is not seen as legitimate, social conflicts may reduce community benefits like trade and e- commerce. Legitimacy must be built into a VCE at design time, or it may not be possible at all. This can be done using a legitimacy requirements framework (LRF) which interprets historical iirightsll in terms of ownership of generic VCE objects. This involves more than merely specifying who has the right to do what to what, because objects may contain other objects, objects may be dependent, rights may interact, groups may have rights, and there may be rights to rights. A LRF could be used by software designers to derive legitimacy requirements for a wide variety of multi-user systems, from chat rooms to virtual realities. It would draw focus to common problems, and aid their common solution. A simple LRF is presented to provide a basis for designers of virtual social environments to copy, discuss or deviate from.