privilege
privilege 2
session checked