On retrieve not apply the filter, only check the permissions