document restriction