Issue 1: Fix filtering in get_objs_for_user

This failing test shows that objects under one class can be
returned when get_objs_for_user is called to return objects of
another class due to lacking filtering in get_objs_for_user.