apply restriction acording to user group