fixing query to exclude data from user