removed access level check on privjoin event