Restrict user access to subject areas