diff --git a/example/api.py b/example/api.py
index <HASH>..<HASH> 100644
--- a/example/api.py
+++ b/example/api.py
@@ -1,4 +1,4 @@
-from flaskext.rest import RestAPI, RestResource, UserAuthentication
+from flaskext.rest import RestAPI, RestResource, UserAuthentication, AdminAuthentication, RestrictOwnerResource
 
 from app import app
 from auth import auth
@@ -6,12 +6,25 @@ from models import User, Message, Relationship
 
 
 user_auth = UserAuthentication(auth)
+admin_auth = AdminAuthentication(auth)
+
+# instantiate our api wrapper
 api = RestAPI(app, default_auth=user_auth)
 
+
 class UserResource(RestResource):
-    exclude = ('password',)
+    exclude = ('password', 'email',)
+
+
+class MessageResource(RestrictOwnerResource):
+    owner_field = 'user'
+
+
+class RelationshipResource(RestrictOwnerResource):
+    owner_field = 'from_user'
 
 
-api.register(Message)
-api.register(Relationship)
-api.register(User, UserResource)
+# register our models so they are exposed via /api/<model>/
+api.register(User, UserResource, auth=admin_auth)
+api.register(Relationship, RelationshipResource)
+api.register(Message, MessageResource)
Cleaning up the example app's API