implemented using privledges for access control in Store