Fixes #17(User should only see and operate on data belongs to him or her)