cardinality restrictions