further improvement on permission to restrict access to certain items