refactor server privileges