check privileges