restricting actions available to shared users