Limit user resource access to just user's own resource.