Fixed permissions in authorization rules to limit scope to entries for current user