restrictions applied, friendly urls still needed