modifying user access restrictions