Privilege check added to update function and message