update all privilege in frontend