Did you consider using respond_with here?  It is the more current approach, and will reduce some repetition in the controllers.  This entire respond_to block would be replaced with:
  respond_with(@privileges, @respond_options)

And in your application controller, you would simply add:
  respond_to :html, :js #plus eventually xml, once you support that in alberich