add user restriction