adding resource restrictions