restrict reading rights