add privileges to canvasuser