and what do you mean by "only allow them to view vendors"?