restrict access method and before filter