login and privilege