Partially implemented and tested role restriction for recurse: only for standalone queries so far.