- changed check for privileges: Now privileges are found even if they are granted via a role