adding access restrictions