finished admin and user page restrictions