set user restriction to pins