Limit scope to app's user(s)