privs for tables