Do not allow users to perform user actions disallowed by their privilege