# Restrict access for specific user
**URL:** https://meta.discourse.org/t/restrict-access-for-specific-user/76812
**Category:** Support
**Created:** [December 27, 2017, 12:34pm UTC](https://meta.discourse.org/t/restrict-access-for-specific-user/76812 "2017-12-27T12:34:05Z")
**Posts on this page:** 9
**Page:** 1
### Author:  [@Bas](https://meta.discourse.org/u/Bas)
#### Post date: [December 27, 2017, 12:34pm UTC](https://meta.discourse.org/t/restrict-access-for-specific-user/76812/1 "2017-12-27T12:34:05Z")
Is it possible to restrict access of a specific user?
My use case is that I want to create a “product feedback bot”-user, that will post in a specific category once people fill in a form embedded in our product.
The API key of this bot would most likely be visible to a determined (trusted) product user. I’d like to restrict the use to posting in a specific category.
Is there a way to strip them of any trust level? I can then grant them posting rights to a specific category
---
### Author:  [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [December 27, 2017, 1:47pm UTC](https://meta.discourse.org/t/restrict-access-for-specific-user/76812/2 "2017-12-27T13:47:46Z")
> [@Bas](#):
>
> Is there a way to strip them of any trust level?
You can lock the user to TL0.
---
### Author:  [@Bas](https://meta.discourse.org/u/Bas)
#### Post date: [December 27, 2017, 1:53pm UTC](https://meta.discourse.org/t/restrict-access-for-specific-user/76812/3 "2017-12-27T13:53:56Z")
That makes sense, at least prevents some of the privileges, but then they can still post in e.g. Uncategorised.
I want this 1 user, to only be able to post in this 1 category, but I feel this usecase isn’t supported yet.
---
### Author:  [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [December 27, 2017, 2:04pm UTC](https://meta.discourse.org/t/restrict-access-for-specific-user/76812/4 "2017-12-27T14:04:43Z")
You will have to put the user in a group and add that group as read only to every category but the one they’re allowed to post into.
---
### Author:  [@Bas](https://meta.discourse.org/u/Bas)
#### Post date: [December 27, 2017, 3:05pm UTC](https://meta.discourse.org/t/restrict-access-for-specific-user/76812/5 "2017-12-27T15:05:44Z")
Ah, they use the most restrictive of the permissions granted? I thought they’d be additive.
So a category with `Create / Reply / See` doe “everyone” and `See` for e.g. “bot-group” wouldn’t allow the bot to post?
That could work!
---
### Author:  [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [December 27, 2017, 3:31pm UTC](https://meta.discourse.org/t/restrict-access-for-specific-user/76812/6 "2017-12-27T15:31:38Z")
That’s a good point. I’m not actually 100% sure.
_EDIT:_ just tested, and they’re indeed **additive**. So I’m afraid your use case isn’t supported at this time.
---
### Author:  [@system](https://meta.discourse.org/u/system)
#### Post date: [March 5, 2020, 9:43am UTC](https://meta.discourse.org/t/restrict-access-for-specific-user/76812/7 "2020-03-05T09:43:04Z")
---
### Author:  [@system](https://meta.discourse.org/u/system)
#### Post date: [February 17, 2024, 8:25am UTC](https://meta.discourse.org/t/restrict-access-for-specific-user/76812/8 "2024-02-17T08:25:40Z")
---
### Author:  [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [April 16, 2024, 12:15pm UTC](https://meta.discourse.org/t/restrict-access-for-specific-user/76812/9 "2024-04-16T12:15:50Z")