added user restrictions