modify the authority of user