inverted logic for privileges and missing variables...