Restrict access to web accessible paths