Allow secondary users to set restrictions