update adduser

add directory access restriction