1) restricting access