client privileges