Where are the default user restrictions defined? TIA.