add privilege based controller