updated user privilege