test(privilege): test authorization

SD-1069 SD-1091