module subsite privilege mechanism works