added params[:privilege] to connection