filter object in controller based on current_user

Signed-off-by: Nicolas Dechesne <n-dechesne@ti.com>