sample of custom app restrictions for restricted profile