add privilege controller