anyone can access restaurant page