Fixed security fix for time-zones. TODO: check roles to avoid check_access before filter