add half assed user restrictions