added get_privileges()