make privilege template to be required and alter validation order