Sudoer

[hwtsai]

I am trying to set up one user to only able to run apt-get. So i visudo sudoers and added this line :

ict localhost= /usr/bin/apt-get

where ict is the user name.
But it turns out that this ict user can handle all services like starting apache for example via sudo.
Anything that i am missing? sorry quite new to this sudoer thing.