{dev bugfix} change the query on cms_privilege, extra wont work because it is a multiple record for privilege