Update to restrict user data access