fix privileges