assume user has privs