editing user restrictions