limits access to certain parts of the application (Iteration I3, Ch. 14)