use Privs in User model