enforce privilege check