Fix privilege check logic