fixed privileges