implemented user restrictions

added users restrictions on modules not assigned to them