privilege rework