Add restrictions according to roles