Restrict userToken and all groupToken and ALL PRIVILEGES