restrict_access_rights