filter common users to access newPackage route