restrict access to all available end points