only send current user's workspaces in backend