you have to grant the privs to the user that owns the package