fixed privileges validation