rights -> privileges