user privileges update: new rules