user change restrictions