fix privilege