Limit users for create action