restricted access paradigm