return privileges in category