user admin do not need to check privilege, which means admin has all the privileges.