need to fix a privilege bug