Merge "Allow PO to set DO restrictions if it's on user 0"