restricted domain