add cid to privilege