added query to pull just the list they have access