Activity restriction based on user role