diff --git a/assessment-api/assessment-actors/src/main/scala/org/sunbird/managers/AssessmentManager.scala b/assessment-api/assessment-actors/src/main/scala/org/sunbird/managers/AssessmentManager.scala
index fc3d99331c9a6c4224bb941e7ee0960df4520c02..407d2d5347b269d9874002ec992115391b409038 100644
--- a/assessment-api/assessment-actors/src/main/scala/org/sunbird/managers/AssessmentManager.scala
+++ b/assessment-api/assessment-actors/src/main/scala/org/sunbird/managers/AssessmentManager.scala
@@ -12,6 +12,7 @@ import org.sunbird.graph.nodes.DataNode
 import org.sunbird.graph.utils.NodeUtil
 import org.sunbird.telemetry.logger.TelemetryManager
 import org.sunbird.telemetry.util.LogTelemetryEventUtil
+import org.sunbird.utils.RequestUtil
 
 import scala.concurrent.{ExecutionContext, Future}
 import scala.collection.JavaConversions._
@@ -27,6 +28,7 @@ object AssessmentManager {
 		val visibility: String = request.getRequest.getOrDefault("visibility", "").asInstanceOf[String]
 		if (StringUtils.isNotBlank(visibility) && StringUtils.equalsIgnoreCase(visibility, "Parent"))
 			throw new ClientException(errCode, "Visibility cannot be Parent!")
+		RequestUtil.restrictProperties(request)
 		DataNode.create(request).map(node => {
 			val response = ResponseHandler.OK
 			response.putAll(Map("identifier" -> node.getIdentifier, "versionKey" -> node.getMetadata.get("versionKey")).asJava)
diff --git a/schemas/question/1.0/config.json b/schemas/question/1.0/config.json
index 621554e0b8e6360d69bd6553b7fea0c97cf59f5e..b37306e3acb8eafc5537ed1f1d51f6f4b26ccf3c 100644
--- a/schemas/question/1.0/config.json
+++ b/schemas/question/1.0/config.json
@@ -9,6 +9,7 @@
   },
   "restrictProps": {
     "create" : [
+      "status"
     ],
     "update" : [
       "visibility", "code", "status", "mimeType"
diff --git a/schemas/questionset/1.0/config.json b/schemas/questionset/1.0/config.json
index e6719f81fa73446fa6872914c9e7d4d5a026d129..f8764d715fd8bd0d2d670897f38d68206e4365d4 100644
--- a/schemas/questionset/1.0/config.json
+++ b/schemas/questionset/1.0/config.json
@@ -48,7 +48,8 @@
   "schema_restrict_api": true,
   "restrictProps": {
     "create": [
-      "children"
+      "children",
+      "status"
     ],
     "update": [
       "children",