Add user and admin restrictions