api after hook changes, and working on user privileges