add restriction for each user