setup user and restrict db access