fixed revoke user privileges