Add missing privilege checking