added restriction when accessing the cart