You are removing all the permission validation; this will return all the assets which is no correct.