restricting permissions on card names+tag