Update the QueryBuilder so that controllers don't show models that aren't supposed to be seen by a user