def authorized(privilege)
  @serials = current_user.user_privileges.find(	:all,
    		:conditions =>"location_id == #{privilege}",
    	      	:order => "name",
                :joins => "inner join privileges on privileges.id = user_privileges.privilege_id"
   )
end