fixed attribute level of password