edit user's privilege