add restrictions. can a user see money, sprnt_time or both