fix campaign REST filter (add check by logged in user)