update: user catalog, add in restrictions for logged in users