return set of privileges on login - can be used to adopt GUI