path restriction