privileges checking added