restrict user for trumpet