feat(privileges): add privileges