refactor privacy bulk edit to fewer request