change restriction on controller