add privilege related function