Privilege checking backend