added access control to get restaurant meals