add functionality for different user privileges. added sql statements for new table in DB