deny application A to execute B