extract resctriction_behavior into restrict_access_to method