add filters to control user access