basic privilege design with database script