Safety issue: privilege control, rewrite, comment