auth ok if cube:__all__ with username in privlegdd list