add privilege control in csr_channel