def privilege_required(privilege)
    	authorized?(privilege) || access_denied
end
def authorized?(privilege)
	user_privleges.include?(Privilege.find_by_name(privilege))
end