update privilege query api