restrictPermissions