OZP-10: filter out widgets that person doesn't have access to