restrict execute access to logged-in user