add a way to "get" the session privileges