add require_admin function
update
no privilege page
update