restrict feed access by current site