getPrivileges()
update routes