restrict access to templates