protect design tab controller from unauthorised use