add privilege control in csr_corp