adding dynamic session privileges