add privilege control in csr_person