filter data accessable to logged in user