fixes to user priveleges