Disable fields & actions the user isn't allowed to use