Restrict user to his subtree and parents all the way top.