limit access of providers to items which are created by the provider