set field test req/res schema and add tests for privilege