remove unused log
add restriction of employee login_name
add restriction of principals login_name