set client restrictions