slight modification to privileges storing / checking