add privileges to model