restricting user commands