removed restric access code out of products controller