Merge "Introduce system API to get source of user restriction" into nyc-dev