Shortcode-based restrictions